CGOA Gitops Patterns Practice Test 3 — 15 Questions

Question 1

What is the primary function of an 'ApplicationSet' in Argo CD?

Accepted Answer

To automate the creation of Argo CD Applications.. ApplicationSets allow for the automated generation of one or more applications from a single template, based on generators like Cluster, List, or Git.

Answer

To perform unit testing on manifests.

Answer

To manage cluster security policies.

Answer

To automatically update the Git repo with new commits.

Question 2

You are using a 'Pull' based GitOps model (e.g., Flux or Argo CD). Why is it considered more secure than a 'Push' based CI/CD model?

Accepted Answer

It eliminates the need for cluster credentials on the CI server.. In a Pull model, the cluster agent pulls changes from Git. The cluster does not need inbound firewall access from the CI/CD server, and no secrets are stored on the CI server.

Answer

It allows faster deployment times.

Answer

It does not require a container registry.

Answer

It is easier to configure with SSH keys.

Question 3

What happens if the 'revision' in an Argo CD Application points to a branch that does not exist?

Accepted Answer

The application will be marked as 'Invalid' or 'Degraded'.. Argo CD will report an 'Invalid' state because it cannot resolve the target revision specified in the manifest.

Answer

It will create the branch automatically.

Answer

It will stop the Argo CD controller.

Answer

It will sync the 'main' branch instead.

Question 4

In GitOps, what is the 'Source of Truth'?

Accepted Answer

The Git repository.. The Git repository is the single source of truth for the desired state of the infrastructure and applications.

Answer

The running Kubernetes cluster.

Answer

The CI pipeline logs.

Answer

The container registry.

Question 5

Why would you choose to use 'Kustomize' over 'Helm' in a GitOps workflow?

Accepted Answer

Because it avoids complex templating logic.. Kustomize is template-free, meaning it uses raw YAML, which is often easier to debug and avoids the 'helm hell' of deeply nested template complexity.

Answer

Because Kustomize is the only tool Argo CD supports.

Answer

Because it supports more advanced logic than Helm.

Answer

Because Kustomize requires a server-side component.

Question 6

When setting up a multi-cluster GitOps pattern, what is the benefit of using 'Cluster Labels' in ApplicationSets?

Accepted Answer

It allows dynamic targeting of clusters based on attributes.. Cluster labels allow you to dynamically select which clusters to deploy to based on attributes (e.g., env=prod), providing a scalable way to target subsets of your infrastructure.

Answer

It increases the speed of the Git clone.

Answer

It reduces the number of namespaces required.

Answer

It encrypts the communication between clusters.

Question 7

When managing multiple environments (dev/stage/prod) in one repository, which folder structure is generally considered best practice?

Accepted Answer

Using environment-specific folders.. Keeping environment configurations in separate folders (e.g., /overlays/dev, /overlays/prod) allows for clear separation and prevents accidental configuration bleeding.

Answer

Storing configurations in the application code folder.

Answer

Putting everything in a single root folder.

Answer

Using different Git repos for every single manifest.

Question 8

You are using Argo Rollouts for progressive delivery. You want to execute a 'AnalysisRun' before switching traffic. Where is the 'AnalysisTemplate' defined?

Accepted Answer

As a Kubernetes resource in Git.. The AnalysisTemplate is a Kubernetes resource that defines the metric queries and thresholds. It is often stored in the same Git repository as the application manifests.

Answer

In the Argo CD global configuration file.

Answer

Hardcoded in the application binary.

Answer

By the Service Mesh control plane directly.

Question 9

What is the primary role of the 'Reconciler' in a GitOps operator?

Accepted Answer

To match the actual state to the desired state.. The reconciler continuously monitors the cluster and the target state (Git), identifying differences and applying actions to make the cluster match the Git definition.

Answer

To delete old pods to save memory.

Answer

To send notifications to Slack.

Answer

To build images.

Question 10

You notice your GitOps operator is performing too many API calls to the Kubernetes API server. What is the most likely configuration issue?

Accepted Answer

The sync policy 'syncPeriod' is set too low.. An aggressive sync interval or a very large number of managed resources without caching can cause excessive API load.

Answer

The Git repo is too large.

Answer

The operator has too many permissions.

Answer

The cluster is running too many pods.

Question 11

What is the main advantage of using a 'Declarative' approach to system management?

Accepted Answer

It makes system state predictable and reproducible.. Declarative systems allow you to define 'what' the state should be, and the system automatically figures out the steps to get there, making it predictable and repeatable.

Answer

It requires less storage in Git.

Answer

It allows you to skip CI/CD testing.

Answer

You can use imperative commands like 'kubectl run'.

Question 12

If you have a multi-cluster setup and you want to ensure that 'production' clusters only pull images from a hardened internal registry, how can you enforce this in GitOps?

Accepted Answer

Using Admission Controllers to enforce policy.. Using Admission Controllers (e.g., OPA Gatekeeper or Kyverno) triggered by the GitOps deployment ensures that only images from approved registries are admitted into the cluster.

Answer

By changing the Argo CD global settings.

Answer

By hardcoding the registry URL in every pod manifest.

Answer

By updating the Git repository access permissions.

Question 13

Which Argo CD feature allows you to manage multiple applications with shared configuration?

Accepted Answer

ApplicationSets.. Argo CD 'ApplicationSets' support templating, allowing you to define a base configuration and apply it across multiple applications dynamically.

Answer

Sync Waves.

Answer

Application Projects.

Answer

Resource Hooks.

Question 14

Which THREE of the following are benefits of the 'App-of-Apps' pattern? (Select three)

Accepted Answer

It enables hierarchical synchronization of applications.. App-of-Apps simplifies large scale management, allows for grouping of related services, and enables hierarchical control of GitOps deployments.

Answer

It ensures all applications use the exact same image tag.

Answer

It eliminates the need for container registries.

Question 15

When implementing multi-cluster GitOps, which THREE components are critical for success? (Select three)

Accepted Answer

Secure communication channel (e.g., mTLS/VPN) between management and targets.. A robust multi-cluster strategy requires a centralized management plane, a way to handle environment-specific differences, and secure connectivity between the hub and spoke clusters.

Answer

A shared database for all clusters to store secrets.

Answer

Uniform network latency across all clusters.