CGOA Tooling Practice Test 2 — 15 Questions

Question 1

What is the primary function of the Flux Image Reflector Controller?

Accepted Answer

Scanning container registries for updates. The Image Reflector Controller scans container registries and reflects image metadata into the cluster as ImageRepository objects.

Answer

Enforcing policies

Answer

Applying Kubernetes manifests

Answer

Encrypting secrets

Question 2

What is the purpose of the 'SealedSecrets' custom resource?

Accepted Answer

Encrypting sensitive data for Git storage. It provides a way to commit encrypted secrets into Git that can only be decrypted by a controller running in the target cluster.

Answer

Backing up Kubernetes secrets

Answer

Managing cluster-wide RBAC

Answer

Encrypting traffic between pods

Question 3

You are debugging an ArgoCD sync failure. You find the 'Sync Status' is 'Failed'. Where is the most detailed error information located?

Accepted Answer

Sync Result in Application UI. The 'Sync' tab in the ArgoCD UI provides the 'Sync Result' and 'Resource Details', which show specific error outputs from the Kubernetes API server.

Answer

ApplicationSet status

Answer

Git log

Answer

ArgoCD repo server logs

Question 4

Which of these is a primary reason for using Helm charts in a GitOps workflow?

Accepted Answer

Templating and packaging complex applications. Helm charts allow packaging complex applications into a single templateable format, which is easier to version and manage than hundreds of individual YAML files.

Answer

Encrypting all traffic

Answer

Replacing the need for Kubernetes

Answer

Creating Git commits automatically

Question 5

Which GitOps tool provides a dedicated CLI called 'argocd'?

Accepted Answer

ArgoCD. ArgoCD provides a powerful CLI tool for interacting with the ArgoCD API, managing applications, and checking sync states.

Answer

Kyverno

Answer

Flux

Answer

Helm

Question 6

You are using Flux and want to pause reconciliation for a specific application without deleting the resource. Which field should you modify?

Accepted Answer

suspend: true. The 'suspend: true' field in the Kustomization or HelmRelease resource pauses reconciliation for that specific object.

Answer

interval: 0

Answer

reconcile: false

Answer

pause: true

Question 7

You have a Git repository that contains multiple Kustomizations. You want Flux to update all of them based on a single trigger. How should you structure the repository?

Accepted Answer

Using a base directory and multiple overlays. Using a base directory with common configurations and multiple overlay directories allows you to trigger updates across the entire hierarchy.

Answer

Using one Git repo per application

Answer

Disabling Kustomize

Answer

Combining all manifests into one large file

Question 8

In ArgoCD, what does the 'Revision' field in an Application manifest represent?

Accepted Answer

The specific git hash or branch being tracked. The 'Revision' field specifies the Git commit hash, tag, or branch that the application is currently synced to.

Answer

The number of times the app has synced

Answer

The ArgoCD version

Answer

The version of the Helm chart

Question 9

When using OPA Gatekeeper for policy enforcement, what resource is used to define the actual logic of the policy?

Accepted Answer

ConstraintTemplate. A 'ConstraintTemplate' defines the Rego logic, while a 'Constraint' applies that logic to specific Kubernetes objects.

Answer

AdmissionRule

Answer

GatekeeperConfig

Answer

PolicyDefinition

Question 10

What is a 'GitOps Operator'?

Accepted Answer

A controller that continuously reconciles Git with cluster state. An operator is a Kubernetes controller that continuously reconciles the cluster state with a source of truth in a Git repository.

Answer

A human user who manages Git

Answer

A CI/CD pipeline server

Answer

A Git server provider

Question 11

You are using ArgoCD and need to ensure that a Helm chart is rendered correctly with a specific set of values. Where do you specify these values in the ArgoCD Application resource?

Accepted Answer

spec.source.helm.values. The 'spec.source.helm.values' field allows for either direct YAML values or a reference to a values file within the repository.

Answer

spec.syncPolicy.values

Answer

spec.parameters

Answer

spec.destination.values

Question 12

Which THREE of the following are valid components of the ArgoCD architecture?

Accepted Answer

API Server. ArgoCD core consists of the API server, the Repo Server, and the Application Controller.

Answer

Source Controller

Answer

Kustomization Controller

Question 13

When configuring Kyverno policies to secure a cluster, which TWO of the following actions can a policy perform?

Accepted Answer

Enforce policies by blocking requests. Kyverno policies can block unauthorized changes (enforce) or simply log them for reporting purposes (audit).

Answer

Provision new clusters

Answer

Manage Git repository webhooks

Answer

Automatically upgrade cluster nodes

Question 14

You are debugging a flux-system reconciliation loop. You notice the Kustomization is stuck in 'Retrying'. What command shows the current status and reason for the failure?

Accepted Answer

flux get kustomizations. The 'flux get kustomizations' command provides a summary including the status and any error messages.

Answer

flux logs

Answer

kubectl describe kustomization

Answer

flux wait

Question 15

Which THREE of the following are common methods for managing secrets in a GitOps workflow?

Accepted Answer

External Secrets Operator. Sealed Secrets, SOPS, and External Secrets Operator (or Vault) are the industry standards for secrets in GitOps.

Answer

Committing raw Kubernetes Secret YAMLs

Answer

Hardcoding credentials in Dockerfiles