CGOA Related Practices Practice Test 3 — 15 Questions

Question 1

What is the best way to handle temporary, non-production overrides in a GitOps environment?

Accepted Answer

Using Kustomize overlays to apply overrides on top of the base configuration.. Using environment-specific overlays (e.g., Kustomize) allows you to maintain clean base manifests while having specific tweaks for test environments.

Answer

Hardcoding all variants into the base file using if/else statements.

Answer

Leaving the cluster in a drifted state.

Answer

Editing the base manifest and pushing it.

Question 2

When implementing GitOps, what is the 'GitOps Operator' pattern specifically meant to solve?

Accepted Answer

It eliminates the need for any manual interaction with the cluster.. The operator pattern solves the problem of drift by constantly reconciling the running state of the cluster with the desired state stored in version control.

Answer

It automates the building of Docker images.

Answer

It replaces the need for a Git repository.

Answer

It provides a user interface for cluster management.

Question 3

Which of these is a primary benefit of 'Infrastructure as Code' (IaC) in a GitOps workflow?

Accepted Answer

It enables the entire infrastructure to be versioned and reconciled automatically.. IaC allows infrastructure to be treated with the same rigor as application code, enabling versioning, testing, and automated reconciliation.

Answer

It replaces the need for monitoring.

Answer

It reduces the number of developers needed.

Answer

It makes the cloud provider cheaper.

Question 4

When migrating to GitOps, why is 'Pull' preferred over 'Push' for CD?

Accepted Answer

It removes the need for exposed API server credentials in the CI tool.. Pull-based systems are more secure as they don't require external entities to have write access to the cluster's internal credentials.

Answer

It makes the deployment process faster.

Answer

It eliminates the need for Git.

Answer

It allows developers to push code directly to production.

Question 5

Which TWO of the following are core principles of the GitOps model?

Accepted Answer

Changes are automatically reconciled to match the declared state.. GitOps is based on the system state being explicitly declared in a version control system and then continuously reconciled by an automated operator.

Answer

All code is written in Go.

Answer

Manual updates are preferred for emergency fixes.

Answer

Developers have direct SSH access to the production cluster.

Question 6

Which THREE components are essential for a complete GitOps CI/CD pipeline?

Accepted Answer

An automated controller that reconciles the cluster to the Git state.. A complete GitOps pipeline requires a Git repository for state, a CI process for artifact creation, and a CD operator for reconciliation.

Answer

A human-operated dashboard for manual deployment.

Answer

A dedicated server for storing logs.

Question 7

Which TWO of the following are common challenges when implementing GitOps in an organization?

Accepted Answer

Addressing configuration drift caused by manual changes to the cluster.. Managing secrets and dealing with existing drift in legacy environments are significant hurdles in adopting GitOps.

Answer

The requirement to use only open-source software.

Answer

The speed at which Git servers process pull requests.

Answer

The lack of support for containerization in the organization.

Question 8

Which TWO of the following best describe the benefits of adopting GitOps?

Accepted Answer

Better auditability through a full history of changes in Git.. GitOps improves consistency and auditability by ensuring the cluster state is always managed through version control.

Answer

Higher speed because testing is bypassed.

Answer

Increased dependence on manual operator intervention.

Answer

The ability to run without any container registry.

Question 9

Which THREE items should be included in your Git repository for a standard GitOps setup?

Accepted Answer

Policy-as-Code files (e.g., OPA policies).. A GitOps repository should contain the declarative manifests, template files (like Helm/Kustomize), and security policies.

Answer

Application source code files.

Answer

The private keys for the production cluster.

Question 10

Which THREE strategies are effective for managing configuration at scale in a GitOps environment?

Accepted Answer

Organizing manifests into a hierarchical directory structure.. Scalable GitOps uses base/overlay patterns, environment-specific directories, and parameterization to keep manifests maintainable.

Answer

Copying the entire deployment configuration for every single environment.

Answer

Storing all configurations in a single root-level file.

Question 11

Which TWO of the following are common pitfalls when integrating DevSecOps into a GitOps pipeline?

Accepted Answer

Skipping vulnerability scans for Kubernetes manifests.. Failing to scan the manifests in the pipeline and leaving secrets in plain text are common GitOps security failures.

Answer

Using multiple branches in Git.

Answer

Setting up an automated reconciliation operator.

Answer

Automating the deployment of code changes.

Question 12

Which THREE of these practices are essential to successfully transition from traditional CI/CD to GitOps?

Accepted Answer

Replacing imperative 'kubectl' commands with declarative manifest files.. Successful transition requires moving away from imperative commands, adopting declarative configuration, and centralizing the source of truth.

Answer

Maintaining a manual 'deployment' document in a wiki.

Answer

Increasing the number of manual approvals in the CI pipeline.

Question 13

Your organization is transitioning from imperative scripts to Infrastructure as Code (IaC) using Terraform. You need to ensure that the infrastructure state remains synchronized with the Git repository after every commit. Which approach best aligns with GitOps principles?

Accepted Answer

Deploy a GitOps controller like Flux or Argo CD to monitor the Terraform state files in Git and apply changes automatically.. GitOps requires a declarative source of truth where the current state of infrastructure is automatically reconciled against the desired state defined in Git.

Answer

Configure a CI pipeline to run terraform apply only when a manual approval is provided by the operations team.

Answer

Execute a scheduled cron job that runs terraform apply.

Answer

Use a webhook to trigger a shell script that pulls the latest changes from the main branch.

Question 14

A security auditor asks how your team handles secret management in a GitOps environment without exposing sensitive credentials in the Git repository. What is the standard GitOps practice for this requirement?

Accepted Answer

Use a tool like Bitnami Sealed Secrets to encrypt secrets that can be decrypted only by the cluster controller.. GitOps relies on tools like Sealed Secrets or external secret stores to inject credentials at runtime, keeping secrets out of the Git repository.

Answer

Create a separate private repository for secrets and clone it during the CI/CD pipeline execution.

Answer

Use Git LFS to encrypt the secret files before pushing them to the remote repository.

Answer

Store secrets in the repository as Base64 encoded environment variables.

Question 15

Your team is integrating a CI pipeline with a GitOps delivery model. Which of the following tasks should remain in the CI pipeline, and which should be moved to the CD/GitOps reconciliation process?

Accepted Answer

Container image building and unit testing remain in CI, while manifest deployment to the cluster moves to GitOps.. CI handles build and test; CD (GitOps) handles reconciliation and deployment.

Answer

Everything, including image building and deployment, must be handled by the GitOps controller.

Answer

The CI pipeline should perform the final deployment to ensure the pipeline status is correctly reported.

Answer

Container image building moves to GitOps, while manifest deployment remains in the CI pipeline.