KCNA Cloud Native Application Delivery Practice Test 6 — 15 Questions

Question 1

A team uses Argo Rollouts for progressive delivery. They configure a canary rollout with a traffic split of 20% to the new version. After verification, the rollout automatically increases traffic to 100%. Which Argo Rollout manifest field controls this gradual traffic increase?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

strategy.canary.steps. The steps field in an Argo Rollout defines the sequence of canary steps, including traffic percentages. Option B (strategy.canary.steps) is correct. Option A (strategy.canary.trafficRouting) configures how traffic routing is done (e.g., with a service mesh). Option C (spec.replicas) sets the total replicas. Option D (template.spec.containers) defines containers.

Answer

strategy.canary.trafficRouting

Answer

template.spec.containers

Answer

spec.replicas

Question 2

What is the purpose of container image scanning in a CI/CD pipeline?

Accepted Answer

To identify security vulnerabilities in the image. Container image scanning checks for known security vulnerabilities (e.g., CVEs) in the image layers and dependencies. This helps prevent deploying vulnerable containers into production. Option A is incorrect because storing in a registry is unrelated; scanning can occur before or after pushing. Option B is incorrect because image size and optimization are separate concerns, often handled by multi-stage builds or other tools. Option C is incorrect because naming conventions are typically enforced via policies or linting, not scanning. Option D correctly identifies the purpose of scanning: identifying security vulnerabilities.

Answer

To ensure the image is stored in a registry

Answer

To measure the image size and optimize it

Answer

To verify the image tag follows naming conventions

Question 3

A team uses Flux to manage GitOps. Which Flux component is responsible for reconciling the cluster state with the desired state defined in a Git repository?

Accepted Answer

Kustomize Controller. In Flux, the Kustomize Controller (option A) is responsible for reconciling the cluster state with the desired state defined in a Git repository. It applies Kubernetes manifests, including Kustomize overlays, to the cluster to ensure the actual state matches the desired state. The Source Controller (option B) fetches source artifacts from Git or other sources, but does not perform reconciliation. The Helm Controller (option C) manages Helm releases, and the Notification Controller (option D) handles event notifications. Therefore, the correct answer is the Kustomize Controller.

Answer

Source Controller

Answer

Helm Controller

Answer

Notification Controller

Question 4

Which command is used to rollback a Helm release to a previous revision?

Accepted Answer

helm rollback . The `helm rollback` command rolls back a release to a specified revision. Option B (helm rollback ) is the correct command. Option A (helm history) shows revision history, not a rollback. Option C (helm install) installs a new release. Option D (helm upgrade) upgrades to a new version, not a rollback.

Answer

helm history <release-name>

Answer

helm install <release-name>

Answer

helm upgrade <release-name>

Question 5

In a blue-green deployment strategy, at any given time, only one environment (blue or green) is active. What is the primary advantage of this approach?

Accepted Answer

Instant rollback by switching traffic back to the previous environment. Blue-green deployments allow instant rollback by switching traffic back to the previous environment. This is the primary advantage: if issues arise in the new version, you can immediately revert by pointing the router/load balancer to the old environment. Option A describes gradual traffic shifting, which is characteristic of canary deployments, not blue-green. Option C is incorrect because blue-green requires two full environments, doubling resource consumption. Option D is false because a load balancer or ingress controller is essential to switch traffic between the two environments.

Answer

Gradual traffic shifting to detect issues early

Answer

Minimal resource consumption by using only one environment

Answer

No need for load balancers or ingress controllers

Question 6

A team wants to use feature flags to control the rollout of a new feature in a Kubernetes-deployed microservice. Which tool is specifically designed for managing feature flags in cloud-native applications?

Accepted Answer

LaunchDarkly. LaunchDarkly is a feature management platform specifically designed for managing feature flags in cloud-native applications. It allows for controlled rollouts and A/B testing. Argo Rollouts focuses on progressive delivery (canary, blue-green deployments), not feature flags. Helm is a package manager for Kubernetes. Kustomize is for configuration management. Therefore, option B (LaunchDarkly) is correct.

Answer

Helm

Answer

Kustomize

Answer

Argo Rollouts

Question 7

Which TWO statements are true about Kustomize? (Choose 2)

Accepted Answer

It supports patching Kubernetes resources via strategic merge patches or JSON patches.. Kustomize uses a base and overlay model to manage environment-specific configurations (D). It supports patching Kubernetes resources via strategic merge patches or JSON patches (A). Kustomize does not use Go templating; it is template-free. It does not handle canary traffic routing, which is typically done by service mesh or deployment tools. It does not package or deploy Helm charts natively.

Answer

It automatically handles canary traffic routing.

Answer

It relies on Go templating to generate Kubernetes manifests.

Answer

It can be used to package and deploy Helm charts.

Question 8

Which THREE are examples of DORA metrics used to measure DevOps performance? (Choose 3)

Accepted Answer

Deployment Frequency. DORA metrics include Deployment Frequency, Lead Time for Changes, Mean Time to Restore (MTTR), and Change Failure Rate. Options A, D, and E are the three correct ones. Option B (Number of developers per team) is not a DORA metric. Option C (Code coverage percentage) is a software quality metric, not a DORA metric.

Answer

Number of developers per team

Answer

Code coverage percentage

Question 9

Which of the following are core components of the Flux GitOps toolkit?

Accepted Answer

Helm Controller. The core components of the Flux GitOps toolkit include Source Controller, Helm Controller, and Kustomize Controller. These controllers manage sources, Helm releases, and Kustomize overlays respectively. Helm (option B) is a standalone tool, and ArgoCD (option D) is a different GitOps tool.

Answer

Helm

Answer

ArgoCD Application Controller

Question 10

What is the primary purpose of a container registry in a CI/CD pipeline?

Accepted Answer

To store and distribute container images. A container registry stores built container images and provides a mechanism to push and pull images. It is a central component in the CI/CD workflow for image distribution.

Answer

To store source code

Answer

To manage Kubernetes secrets

Answer

To run unit tests

Question 11

A team uses Helm to manage their Kubernetes applications. They need to upgrade a release and want to reuse the values from the previous release while overriding a specific value. Which helm command should they use?

Accepted Answer

helm upgrade --reuse-values my-release ./charts/app --set image.tag=v2. The --reuse-values flag tells Helm to reuse the last release's values and merge any provided overrides. This is the correct approach to preserve existing values while updating a specific one.

Answer

helm upgrade --reset-values my-release ./charts/app --set image.tag=v2

Answer

helm upgrade --atomic my-release ./charts/app --set image.tag=v2

Answer

helm upgrade --history-max 5 my-release ./charts/app --set image.tag=v2

Question 12

A Kubernetes cluster runs a critical application that must be updated with zero downtime. The team wants to gradually shift traffic from the old version to the new version over a period of time. Which deployment pattern is MOST appropriate?

Accepted Answer

Canary deployment. Canary deployment involves rolling out the new version to a small subset of users initially and gradually increasing traffic while monitoring for issues. This minimizes risk and provides control over the rollout.

Answer

Rolling update

Answer

Recreate deployment

Answer

Blue-green deployment

Question 13

In the context of DORA metrics, which metric measures how often an organization successfully releases to production?

Accepted Answer

Deployment frequency. Deployment frequency is a DORA metric that measures how often an organization deploys code to production or an operational environment.

Answer

Lead time for changes

Answer

Mean time to restore (MTTR)

Answer

Change failure rate

Question 14

Which TWO of the following are characteristics of Kustomize?

Accepted Answer

Supports patching resources via patchesStrategicMerge. Kustomize uses overlays to customize Kubernetes manifests without templating. It does not use values files or require a package manager.

Answer

Requires a values.yaml file for configuration

Answer

Uses a templating engine similar to Helm

Answer

Can manage dependencies between charts

Question 15

Which TWO of the following are features of ArgoCD that support GitOps principles?

Accepted Answer

Health status visualization of applications. ArgoCD supports GitOps by automatically syncing the cluster to the desired state defined in Git (option D) and providing health status visualization (option B) to monitor applications. Option A is incorrect because ArgoCD does not manage secrets automatically; it relies on external tools like SealedSecrets or external secret operators. Option C is incorrect because ArgoCD does not have a built-in template engine; it delegates manifest generation to tools like Kustomize or Helm. Option E is incorrect because while ArgoCD can be configured for self-healing, it is not a standalone feature; self-healing is a behavior that results from the automated sync (option D) and is not a separate feature listed in the core capabilities.

Answer

Automatic secret management

Answer

Built-in template engine for generating manifests

Answer

Self-healing by reverting manual changes