CGOA Practice Test 2 — 30 Questions

Question 1

What is the impact of enabling 'selfHeal' in an Argo CD Application sync policy?

Accepted Answer

It automatically reverts manual changes to the cluster.. If 'selfHeal' is true, Argo CD will automatically overwrite any manual changes made to the cluster, reverting it to the Git-defined state.

Answer

It automatically creates backups of the cluster state.

Answer

It automatically patches the application with the latest security updates.

Answer

It disables the UI for that application.

Question 2

Which TWO of the following are true about the 'Pull' model in GitOps? (Select two)

Accepted Answer

It improves security by removing the need for cluster credentials in CI.. The pull model uses an internal controller to fetch desired state from Git, which is more secure and reliable than pushing from an external CI system.

Answer

It is only supported for Helm charts.

Answer

It requires opening an inbound port on the cluster firewall.

Answer

It requires the CI pipeline to be active 24/7.

Question 3

Which of the following best describes the 'Declarative' principle in GitOps?

Accepted Answer

Defining the target state in configuration files.. Declarative means defining the end state of the system, rather than the sequence of commands to reach that state.

Answer

Using an interactive terminal to manage resources.

Answer

Providing a script to update resources.

Answer

Requiring manual approval for every reconciliation.

Question 4

Which THREE are standard ways to implement GitOps with Helm?

Accepted Answer

Using a GitOps operator to trigger 'helm install'.. Helm can be used by packaging charts in Git, using a GitOps operator to render templates, or by storing values files in Git.

Answer

Running 'helm upgrade' manually.

Answer

Only storing the chart source code.

Question 5

Which TWO of the following are considered advantages of the GitOps approach?

Accepted Answer

Improved auditability through version-controlled commits.. GitOps improves auditability through Git logs and reduces the risk of manual configuration errors.

Answer

Increased reliance on manual CLI interventions.

Answer

Automatic creation of new business requirements.

Answer

Ability to bypass security protocols.

Question 6

You want to use Helm for your GitOps deployments. Where should the 'values.yaml' file reside for environment-specific overrides?

Accepted Answer

In the Git repository, per environment.. Environment-specific values files (e.g., values-prod.yaml) are typically stored in the Git repository alongside the chart or in a separate environment-specific folder, allowing for clear separation of concerns.

Answer

In a local machine folder not tracked by Git.

Answer

In the Argo CD global settings.

Answer

Inside the container image.

Question 7

You are using Argo Rollouts for progressive delivery. You want to execute a 'AnalysisRun' before switching traffic. Where is the 'AnalysisTemplate' defined?

Accepted Answer

As a Kubernetes resource in Git.. The AnalysisTemplate is a Kubernetes resource that defines the metric queries and thresholds. It is often stored in the same Git repository as the application manifests.

Answer

In the Argo CD global configuration file.

Answer

Hardcoded in the application binary.

Answer

By the Service Mesh control plane directly.

Question 8

Which TWO of the following are features of progressive delivery in GitOps? (Select two)

Accepted Answer

Gradual traffic shifting between application versions.. Progressive delivery allows for safer deployments by limiting the blast radius through canary or blue-green releases and automated metric-based rollbacks.

Answer

Manually logging into pods to check health.

Answer

Immediate deployment of all changes to the entire cluster.

Answer

Removing all health checks from the application.

Question 9

You are using a 'Pull' based GitOps model (e.g., Flux or Argo CD). Why is it considered more secure than a 'Push' based CI/CD model?

Accepted Answer

It eliminates the need for cluster credentials on the CI server.. In a Pull model, the cluster agent pulls changes from Git. The cluster does not need inbound firewall access from the CI/CD server, and no secrets are stored on the CI server.

Answer

It allows faster deployment times.

Answer

It does not require a container registry.

Answer

It is easier to configure with SSH keys.

Question 10

When implementing multi-cluster GitOps, which THREE components are critical for success? (Select three)

Accepted Answer

Secure communication channel (e.g., mTLS/VPN) between management and targets.. A robust multi-cluster strategy requires a centralized management plane, a way to handle environment-specific differences, and secure connectivity between the hub and spoke clusters.

Answer

A shared database for all clusters to store secrets.

Answer

Uniform network latency across all clusters.

Question 11

Which TWO of the following are essential when using Helm in a GitOps workflow? (Select two)

Accepted Answer

Defining environment-specific overrides in values files.. GitOps with Helm requires versioning charts and tracking the specific values files used for each deployment environment.

Answer

Ignoring the chart dependencies.

Answer

Installing Helm manually on every node in the cluster.

Answer

Always using the 'latest' version of the chart.

Question 12

In a multi-cluster GitOps environment, you are using the ApplicationSet controller with a 'Cluster Generator'. You need to add a new cluster dynamically without modifying the ApplicationSet manifest. How should you achieve this?

Accepted Answer

Add a secret with the label 'argocd.argoproj.io/secret-type: cluster' to the management cluster.. The Cluster Generator can watch for new Kubernetes Secrets with the label 'argocd.argoproj.io/secret-type: cluster'. Once a new secret is added with this label, the controller automatically detects it and deploys the applications.

Answer

Update the ApplicationSet manifest via a manual Git commit.

Answer

Execute 'argocd cluster add' via the CLI.

Answer

Modify the 'clusters.yaml' file in the root Git repository.

Question 13

In GitOps, what does 'Self-Healing' mean?

Accepted Answer

The controller replaces manual changes with the state from Git.. Self-healing refers to the ability of the GitOps controller to automatically detect drift and revert the cluster to the state defined in Git.

Answer

The cluster reboots itself if it runs out of memory.

Answer

The application restarts if a pod crashes.

Answer

The developer re-pushes the code to fix the bug.

Question 14

You notice your GitOps operator is performing too many API calls to the Kubernetes API server. What is the most likely configuration issue?

Accepted Answer

The sync policy 'syncPeriod' is set too low.. An aggressive sync interval or a very large number of managed resources without caching can cause excessive API load.

Answer

The Git repo is too large.

Answer

The operator has too many permissions.

Answer

The cluster is running too many pods.

Question 15

Which THREE of the following are necessary to prevent 'Secret Sprawl' in a multi-cluster environment? (Select three)

Accepted Answer

Using External Secrets Operator to sync secrets to specific namespaces.. To prevent secrets from being exposed everywhere, you should use tools like External Secrets, namespace-scoped secrets, and avoid putting sensitive data directly into the Git repository.

Answer

Granting 'cluster-admin' to the GitOps operator service account.

Answer

Storing encrypted secrets in the Git repository.

Question 16

Which THREE of the following are standard ways to organize a Git repository for a multi-tenant environment? (Select three)

Accepted Answer

Using labels to filter resources for different tenants.. Organization patterns include project-based repos, environment-based folders, or using ApplicationSets to dynamically separate tenants.

Answer

Storing all secrets in plain text in the root folder.

Answer

Hardcoding all cluster IPs in a single global config.

Question 17

Which Argo CD feature allows you to manage multiple applications with shared configuration?

Accepted Answer

ApplicationSets.. Argo CD 'ApplicationSets' support templating, allowing you to define a base configuration and apply it across multiple applications dynamically.

Answer

Sync Waves.

Answer

Application Projects.

Answer

Resource Hooks.

Question 18

Which THREE of the following represent common symptoms of 'drift' in a GitOps-managed cluster?

Accepted Answer

Unexpected changes to resource labels or annotations. Drift occurs when the runtime state deviates from the Git-stored state.

Answer

Successful CI pipeline execution

Answer

Git commit history being too long

Question 19

When should you use Kustomize in a GitOps workflow?

Accepted Answer

To manage environment-specific overrides in a declarative way.. Kustomize is excellent for managing environment-specific configurations without duplicating base manifests.

Answer

To build container images.

Answer

To delete all namespaces.

Answer

To perform load testing on the cluster.

Question 20

Which of the following actions best aligns with the GitOps principle of 'Automated Pull-Based Reconciliation'?

Accepted Answer

A cluster-resident controller actively pulling manifests from a Git repository. Pull-based reconciliation involves an agent running inside the cluster that actively fetches the desired state from Git, rather than a CI system pushing changes.

Answer

A developer manually running Helm upgrade in the production environment

Answer

Using a Git hook to trigger an SSH deployment script on a remote server

Answer

Jenkins triggers a 'kubectl apply' command to push changes from the CI server