CGOA Practice Test 2 — 25 Questions

Question 1

Which THREE of the following are valid components or patterns used in Progressive Delivery with GitOps? (Select THREE)

Accepted Answer

AnalysisTemplates. Argo Rollouts, AnalysisTemplates, and blue-green deployments are all core components and patterns used to achieve progressive delivery within a GitOps ecosystem.

Answer

Git-Branch-Per-Environment

Answer

Argo Workflows

Question 2

Which of the following is a core principle of GitOps?

Accepted Answer

The system state is defined in a version-controlled repository.. GitOps defines the desired state in a version-controlled repository, which acts as the 'single source of truth'.

Answer

Manual intervention is required to scale deployments.

Answer

Developers should have direct 'cluster-admin' access.

Answer

The system state is defined by the latest CI pipeline execution.

Question 3

Which TWO of the following help ensure successful multi-cluster GitOps rollouts? (Select two)

Accepted Answer

Using canary deployment phases per cluster group.. Phased rollouts and cluster grouping ensure that if a deployment fails, it is contained to a specific set of clusters rather than the entire fleet.

Answer

Deploying to all clusters at the same time.

Answer

Using only one Git repository for all cluster configurations.

Answer

Hardcoding cluster IPs in the manifest files.

Question 4

In a GitOps promotion pipeline, why is it recommended to tag container images with a unique Git commit SHA instead of 'latest'?

Accepted Answer

To ensure immutability and auditability.. Using the Git commit SHA provides traceability and immutability. 'Latest' is a mutable tag that can point to different versions over time, making rollbacks impossible.

Answer

Because the container registry requires unique SHAs.

Answer

To reduce the size of the container image.

Answer

Because 'latest' is deprecated by Docker.

Question 5

What is the primary role of the 'Reconciler' in a GitOps operator?

Accepted Answer

To match the actual state to the desired state.. The reconciler continuously monitors the cluster and the target state (Git), identifying differences and applying actions to make the cluster match the Git definition.

Answer

To delete old pods to save memory.

Answer

To send notifications to Slack.

Answer

To build images.

Question 6

What is the impact of enabling 'selfHeal' in an Argo CD Application sync policy?

Accepted Answer

It automatically reverts manual changes to the cluster.. If 'selfHeal' is true, Argo CD will automatically overwrite any manual changes made to the cluster, reverting it to the Git-defined state.

Answer

It automatically creates backups of the cluster state.

Answer

It automatically patches the application with the latest security updates.

Answer

It disables the UI for that application.

Question 7

Which TWO of the following are true about the 'Pull' model in GitOps? (Select two)

Accepted Answer

It improves security by removing the need for cluster credentials in CI.. The pull model uses an internal controller to fetch desired state from Git, which is more secure and reliable than pushing from an external CI system.

Answer

It is only supported for Helm charts.

Answer

It requires opening an inbound port on the cluster firewall.

Answer

It requires the CI pipeline to be active 24/7.

Question 8

Which of the following best describes the 'Declarative' principle in GitOps?

Accepted Answer

Defining the target state in configuration files.. Declarative means defining the end state of the system, rather than the sequence of commands to reach that state.

Answer

Using an interactive terminal to manage resources.

Answer

Providing a script to update resources.

Answer

Requiring manual approval for every reconciliation.

Question 9

Which THREE are standard ways to implement GitOps with Helm?

Accepted Answer

Using a GitOps operator to trigger 'helm install'.. Helm can be used by packaging charts in Git, using a GitOps operator to render templates, or by storing values files in Git.

Answer

Running 'helm upgrade' manually.

Answer

Only storing the chart source code.

Question 10

Which TWO of the following are considered advantages of the GitOps approach?

Accepted Answer

Improved auditability through version-controlled commits.. GitOps improves auditability through Git logs and reduces the risk of manual configuration errors.

Answer

Increased reliance on manual CLI interventions.

Answer

Automatic creation of new business requirements.

Answer

Ability to bypass security protocols.

Question 11

You want to use Helm for your GitOps deployments. Where should the 'values.yaml' file reside for environment-specific overrides?

Accepted Answer

In the Git repository, per environment.. Environment-specific values files (e.g., values-prod.yaml) are typically stored in the Git repository alongside the chart or in a separate environment-specific folder, allowing for clear separation of concerns.

Answer

In a local machine folder not tracked by Git.

Answer

In the Argo CD global settings.

Answer

Inside the container image.

Question 12

You are using Argo Rollouts for progressive delivery. You want to execute a 'AnalysisRun' before switching traffic. Where is the 'AnalysisTemplate' defined?

Accepted Answer

As a Kubernetes resource in Git.. The AnalysisTemplate is a Kubernetes resource that defines the metric queries and thresholds. It is often stored in the same Git repository as the application manifests.

Answer

In the Argo CD global configuration file.

Answer

Hardcoded in the application binary.

Answer

By the Service Mesh control plane directly.

Question 13

Which TWO of the following are features of progressive delivery in GitOps? (Select two)

Accepted Answer

Gradual traffic shifting between application versions.. Progressive delivery allows for safer deployments by limiting the blast radius through canary or blue-green releases and automated metric-based rollbacks.

Answer

Manually logging into pods to check health.

Answer

Immediate deployment of all changes to the entire cluster.

Answer

Removing all health checks from the application.

Question 14

You are using a 'Pull' based GitOps model (e.g., Flux or Argo CD). Why is it considered more secure than a 'Push' based CI/CD model?

Accepted Answer

It eliminates the need for cluster credentials on the CI server.. In a Pull model, the cluster agent pulls changes from Git. The cluster does not need inbound firewall access from the CI/CD server, and no secrets are stored on the CI server.

Answer

It allows faster deployment times.

Answer

It does not require a container registry.

Answer

It is easier to configure with SSH keys.

Question 15

When implementing multi-cluster GitOps, which THREE components are critical for success? (Select three)

Accepted Answer

Secure communication channel (e.g., mTLS/VPN) between management and targets.. A robust multi-cluster strategy requires a centralized management plane, a way to handle environment-specific differences, and secure connectivity between the hub and spoke clusters.

Answer

A shared database for all clusters to store secrets.

Answer

Uniform network latency across all clusters.

Question 16

Which TWO of the following are essential when using Helm in a GitOps workflow? (Select two)

Accepted Answer

Defining environment-specific overrides in values files.. GitOps with Helm requires versioning charts and tracking the specific values files used for each deployment environment.

Answer

Ignoring the chart dependencies.

Answer

Installing Helm manually on every node in the cluster.

Answer

Always using the 'latest' version of the chart.

Question 17

In a multi-cluster GitOps environment, you are using the ApplicationSet controller with a 'Cluster Generator'. You need to add a new cluster dynamically without modifying the ApplicationSet manifest. How should you achieve this?

Accepted Answer

Add a secret with the label 'argocd.argoproj.io/secret-type: cluster' to the management cluster.. The Cluster Generator can watch for new Kubernetes Secrets with the label 'argocd.argoproj.io/secret-type: cluster'. Once a new secret is added with this label, the controller automatically detects it and deploys the applications.

Answer

Update the ApplicationSet manifest via a manual Git commit.

Answer

Execute 'argocd cluster add' via the CLI.

Answer

Modify the 'clusters.yaml' file in the root Git repository.

Question 18

In GitOps, what does 'Self-Healing' mean?

Accepted Answer

The controller replaces manual changes with the state from Git.. Self-healing refers to the ability of the GitOps controller to automatically detect drift and revert the cluster to the state defined in Git.

Answer

The cluster reboots itself if it runs out of memory.

Answer

The application restarts if a pod crashes.

Answer

The developer re-pushes the code to fix the bug.

Question 19

You notice your GitOps operator is performing too many API calls to the Kubernetes API server. What is the most likely configuration issue?

Accepted Answer

The sync policy 'syncPeriod' is set too low.. An aggressive sync interval or a very large number of managed resources without caching can cause excessive API load.

Answer

The Git repo is too large.

Answer

The operator has too many permissions.

Answer

The cluster is running too many pods.

Question 20

Which THREE of the following are necessary to prevent 'Secret Sprawl' in a multi-cluster environment? (Select three)

Accepted Answer

Using External Secrets Operator to sync secrets to specific namespaces.. To prevent secrets from being exposed everywhere, you should use tools like External Secrets, namespace-scoped secrets, and avoid putting sensitive data directly into the Git repository.

Answer

Granting 'cluster-admin' to the GitOps operator service account.

Answer

Storing encrypted secrets in the Git repository.