Related Practices

When implementing DevSecOps within a GitOps workflow, where should the automated policy enforcement (like OPA/Gatekeeper) occur?

Why is 'Git' considered the 'source of truth' in GitOps?

What is the primary function of an 'Admission Controller' in a GitOps-based DevSecOps workflow?

Which THREE of the following are primary benefits of adopting GitOps for CI/CD integration?

Which TWO of the following are common challenges when implementing GitOps in an organization?

When using a GitOps operator that performs 'image polling', what is the risk of using a 'latest' tag?

Your platform team runs a GitOps operator that continuously reconciles a Kubernetes cluster against a Git repository. A compliance auditor asks how you can prove that no unapproved manual changes have been applied to production over the last 90 days. Which practice should you implement to satisfy this requirement?

A platform team runs a GitOps operator that continuously reconciles cluster state from a Git repository. A compliance auditor asks how the team can prove which commit produced the configuration currently running in production six weeks ago, after many merges and rollbacks. Which practice best satisfies this requirement?

You are debugging a drift in a GitOps environment. The cluster state differs from the Git repository. What is the most likely cause if you are using Flux?

Which THREE components are essential for a complete GitOps CI/CD pipeline?

Which TWO of the following are core principles of the GitOps model?

Which of these is a primary benefit of 'Infrastructure as Code' (IaC) in a GitOps workflow?

Which action should a developer take to deploy a new version of an application in a GitOps-based workflow?

A company uses Terraform for IaC and Argo CD for application delivery. How should they manage the dependency between infrastructure provisioning and app deployment to ensure GitOps consistency?

When implementing a CI/CD pipeline for GitOps, how should you handle image tag updates?

Which TWO of the following are core components of a mature GitOps-based DevSecOps practice?

What is the primary benefit of using a pull-based GitOps operator compared to a push-based CI/CD system?

Which of the following describes the 'Declarative' aspect of GitOps?

Why do you use a separate repository for application code and application manifests (deployment manifests) in GitOps?

When migrating to GitOps, why is 'Pull' preferred over 'Push' for CD?

What is the key difference between Configuration as Code and Infrastructure as Code in the context of GitOps?

What is the most effective approach to handle 'secrets' in GitOps when you require strict compliance that mandates secrets never exist in plain text in the repo?

You are migrating a legacy application deployment process to GitOps. The application requires a specific sequence of database migrations to run before the new container version is deployed. How do you implement this in a GitOps-friendly way?

In a GitOps pattern, how do you manage a rollback when an application deployment fails?

An organization separates its GitOps repositories into an application repo and an environment configuration repo. Developers merge frequently into the application repo, while the environment repo pins image digests. A release engineer must promote a tested build from staging to production. Which action aligns with this separation of concerns?

You are auditing a GitOps process. Which of the following is an indicator that the process is NOT truly following GitOps principles?

You notice that your GitOps pipeline is stuck in a loop. What is the most likely cause?

Your team is integrating a CI pipeline with a GitOps delivery model. Which of the following tasks should remain in the CI pipeline, and which should be moved to the CD/GitOps reconciliation process?

Your organization uses a 'GitOps Operator' to manage deployments. What happens if a developer manually changes a configuration on the Kubernetes cluster using 'kubectl edit'?

What is the best way to handle temporary, non-production overrides in a GitOps environment?

In the context of 'Configuration as Code', why is it considered a best practice to use a declarative manifest format (like YAML) rather than imperative commands?

Which tool provides the most native integration for managing Kubernetes manifests using Kustomize within a GitOps workflow?

A team adopting GitOps wants to reduce the blast radius of a bad change and shorten mean time to recovery. They already store all manifests in Git and use an operator for reconciliation. Which practice most directly limits the impact of a faulty change reaching production?

A security auditor asks how your team handles secret management in a GitOps environment without exposing sensitive credentials in the Git repository. What is the standard GitOps practice for this requirement?

In the context of a CI/CD pipeline, where does the 'GitOps' bridge typically occur?

A team is designing a GitOps workflow and wants to enforce policy and compliance before changes reach production clusters. Which two practices fit a GitOps-aligned governance model? (Choose two.)

What is the primary role of the GitOps operator during the reconciliation phase?

When configuring a GitOps pipeline, what should be done to manage sensitive data like API keys?

A team is transitioning from traditional imperative scripts to declarative Configuration as Code. Which approach best satisfies the GitOps principle of using a desired state definition?

Which TWO of the following are common pitfalls when integrating DevSecOps into a GitOps pipeline?

Which practice represents the 'DevSecOps' aspect in a GitOps pipeline?

Your organization wants to implement DevSecOps by integrating security scanning into a GitOps pipeline. Where should the vulnerability scan happen to prevent insecure configurations from ever reaching the cluster?

You are managing a global cluster setup with GitOps. How do you handle configuration that must be identical across all clusters while allowing for regional variations?

A team wants to detect when someone manually edits a live resource so that the cluster diverges from Git. Their operator reconciles every five minutes. What is the most accurate statement about detection and remediation in this setup?

In a GitOps environment, what is the main purpose of maintaining Infrastructure as Code?

In a GitOps environment, what is the best strategy for managing external dependencies (like Helm charts)?

When mapping traditional CI/CD to GitOps, which component from the traditional world is often 'decommissioned' or replaced?

Which THREE strategies are effective for managing configuration at scale in a GitOps environment?

How does the GitOps pattern simplify the audit process for a regulatory environment?

When mapping a traditional CI/CD pipeline to GitOps, what is the primary role of the CD tool?

Which THREE items should be included in your Git repository for a standard GitOps setup?

Which TWO of the following best describe the benefits of adopting GitOps?

Which THREE of these practices are essential to successfully transition from traditional CI/CD to GitOps?

You are implementing a multi-environment strategy. Which Git branching strategy best supports GitOps?

Which TWO of the following are valid reasons to maintain a clear separation between the CI pipeline and the GitOps controller?