CGOA Practice Test 8 — 10 Questions

Question 1

Which of the following is a primary benefit of using a GitOps pull-based model over a push-based CI/CD model?

Accepted Answer

Removal of the need for external access to cluster credentials.. Pull-based models increase security by eliminating the need to expose cluster credentials to external CI/CD pipelines.

Answer

Automatic code compilation within the cluster.

Answer

Support for imperative commands.

Answer

Faster deployment velocity.

Question 2

Which THREE of the following are common GitOps tools used in the CNCF ecosystem?

Accepted Answer

Crossplane.. Argo CD, Flux, and Crossplane are recognized GitOps-focused tools.

Answer

Apache HTTP Server.

Answer

MySQL.

Question 3

You are debugging a GitOps deployment. The controller shows 'OutOfSync' but the cluster seems to be running correctly. What is the most likely cause?

Accepted Answer

Manual changes were made to the live resource that weren't captured in Git.. An 'OutOfSync' status indicates that the actual cluster configuration deviates from the declarative state defined in Git.

Answer

The network latency to the Git server is too high.

Answer

The Git repository is empty.

Answer

The controller is broken.

Question 4

What is the primary advantage of storing Kubernetes manifests in a version-controlled repository?

Accepted Answer

It provides a backup in case the cluster is deleted.. Version control allows for tracking changes, reverting to previous states, and providing a historical audit log.

Answer

It makes the container images run faster.

Answer

It automatically patches security vulnerabilities.

Answer

It allows developers to bypass the CI/CD system.

Question 5

In GitOps, what is a 'Merge Request' (or Pull Request) used for?

Accepted Answer

To review, approve, and audit proposed changes to the desired state.. The PR/MR process acts as a gatekeeping mechanism for reviewing and approving changes before they are merged into the main branch and applied to the cluster.

Answer

To bypass security checks.

Answer

To perform unit tests on the code.

Answer

To delete the cluster.

Question 6

Which of these is a typical 'Desired State' artifact in GitOps?

Accepted Answer

A Kubernetes YAML manifest.. Kubernetes manifest files, Helm charts, or Kustomize templates are the standard ways to define declarative state.

Answer

An audit log from the cluster.

Answer

A shell script that installs software.

Answer

A live running container.

Question 7

What is the purpose of 'Image Tagging' in a GitOps workflow?

Accepted Answer

To ensure that the exact version of the application is deployed consistently.. Using specific image tags (e.g., SHA-based, not 'latest') ensures that the deployment remains deterministic and immutable.

Answer

To force the container to restart.

Answer

To track how many users are logged in.

Answer

To allow the container registry to delete old images.

Question 8

Which TWO are common strategies for GitOps repo structure?

Accepted Answer

Directory-per-environment.. Common strategies include 'App-of-Apps' for managing nested dependencies and 'Directory-per-Environment' for separating configurations.

Answer

Creating one repository per single microservice.

Answer

Never using branches.

Answer

Storing all files in a single flat directory.

Question 9

When defining a declarative desired state in Kubernetes, which attribute is essential to satisfy the 'declarative' principle?

Accepted Answer

A YAML manifest describing the final resource configuration.. The manifest should define the final state, not the steps taken to achieve it.

Answer

A shell script that executes 'kubectl apply'.

Answer

A webhook that triggers an update process.

Answer

A manual 'kubectl edit' command.

Question 10

Why is 'pull-based' reconciliation considered more secure than 'push-based' CI/CD?

Accepted Answer

Because the cluster initiates the connection.. Push-based systems require the CI/CD server to have cluster-admin credentials, whereas pull-based controllers use service accounts within the cluster.

Answer

Because it eliminates the need for Git.

Answer

Because Git requires passwords for every pull.

Answer

Because it removes the need for container images.