CGOA Practice Test 6 — 10 Questions

Question 1

Which THREE of the following are essential security practices for GitOps? (Select three)

Accepted Answer

Strict RBAC for both the Git repository and the Kubernetes cluster.. GitOps security relies on repository access controls, secret management, and policy enforcement (like OPA) to ensure the system remains compliant.

Answer

Giving every developer direct 'cluster-admin' access.

Answer

Sharing the Git repository password with all cluster users.

Question 2

Which THREE of the following are benefits of using the App-of-Apps pattern? (Select THREE)

Accepted Answer

Centralized management of multiple applications.. The App-of-Apps pattern simplifies management by providing a single point of visibility, enabling bulk operations, and allowing for hierarchical organization of applications.

Answer

Elimination of the need for Helm.

Answer

Automatic promotion of code between environments.

Question 3

Which of the following is NOT a benefit of the GitOps model?

Accepted Answer

Increased system performance.. GitOps does not necessarily increase the performance of the underlying application; it focuses on deployment and configuration consistency.

Answer

Improved auditability.

Answer

Faster recovery from disasters.

Answer

Standardized deployment processes.

Question 4

Which TWO of the following are core principles of GitOps?

Accepted Answer

Declarative desired state.. Declarative state and automated, continuous reconciliation are the foundational pillars of the GitOps methodology.

Answer

Using a GUI for all configuration tasks.

Answer

Use of imperative CLI commands.

Answer

Manual approval for every single sync.

Question 5

Which THREE mechanisms can be used to notify a GitOps controller of a change in Git?

Accepted Answer

Git repository webhooks.. Controllers can detect changes via polling (continuous), webhooks (event-driven), or manual sync requests.

Answer

SSH-based push from the local machine.

Answer

Waiting for a container crash.

Question 6

You are using Argo CD. A developer manually scales a Deployment replica count using 'kubectl scale'. What happens next in a standard GitOps implementation?

Accepted Answer

The controller detects the drift and overwrites the manual change to match Git.. The GitOps controller detects a mismatch between the live state and the Git-defined desired state and automatically reverts it.

Answer

Argo CD sends an alert but does not revert the change.

Answer

The controller updates Git to reflect the new replica count.

Answer

The change persists until the next Git commit.

Question 7

A developer pushes a change to Git, but the cluster does not update. Which log source is most effective for debugging the pull-based mechanism?

Accepted Answer

The logs of the GitOps controller (e.g., Argo CD repo-server or Flux controller).. The controller logs contain information about the reconciliation process, including authentication or parsing errors.

Answer

The browser console of the user.

Answer

The application's logs inside the pod.

Answer

The Git provider's audit logs.

Question 8

When implementing a GitOps workflow with Argo CD, what is the role of the 'AppProject' custom resource?

Accepted Answer

It enforces security boundaries and scope for a set of applications. The AppProject resource acts as a logical grouping for Applications, allowing administrators to restrict where they can be deployed and which resources are permitted, providing multi-tenant security.

Answer

It automatically triggers infrastructure rollbacks upon failure

Answer

It defines the build pipeline for container images

Answer

It stores the Git credentials for the entire cluster

Question 9

A developer updates a Helm release values file in Git to change a ConfigMap key. How does the GitOps pull-based agent determine that reconciliation is necessary?

Accepted Answer

The agent continuously compares the target Git repository commit SHA and state against the cluster's actual state.. The pull-based GitOps agent periodically polls or receives webhooks from the Git repository, comparing the target Git revision (SHA or tag) and contents against the current state stored/deployed in the cluster.

Answer

The container registry notifies the GitOps agent whenever a ConfigMap is altered in the source code.

Answer

The Kubernetes API server continuously queries the Git repository directly without using any controller.

Answer

The agent receives an SSH trigger sent manually by the developer from their workstation.

Question 10

When deploying across multiple clusters using Argo CD, you need to ensure that specific secrets are only available to clusters located in the 'us-east' region. Which resource should you use to enforce this segregation?

Accepted Answer

AppProject. Argo CD AppProject objects are designed specifically to restrict cluster access and namespace access, making them the correct tool for multi-cluster security and segregation.

Answer

ConfigMap

Answer

ApplicationSet

Answer

ClusterRoleBinding