troubleshooting

When setting up Argo CD, which TWO components are essential to define a GitOps workflow?

What is the purpose of the 'destination' field in an Argo CD Application manifest?

Which THREE of the following are core requirements for adopting a GitOps-based workflow?

You are deploying applications across multiple clusters using Argo CD. You want to implement a hub-and-spoke model where the central management cluster controls all edge clusters. Which THREE of the following are necessary to correctly configure this pattern?

Which TWO of the following are core principles of GitOps?

Which THREE of the following are potential risks of ignoring drift in a GitOps environment?

In the context of GitOps, what is 'Configuration Drift'?

When implementing DevSecOps within a GitOps workflow, where should the automated policy enforcement (like OPA/Gatekeeper) occur?

A platform team is designing a GitOps workflow and wants to avoid common failure modes that undermine the model's guarantees. Which TWO practices undermine a GitOps workflow? (Choose two.)

What does the term 'Self-Healing' mean in a GitOps context?

What is the primary benefit of a 'pull' deployment model compared to a 'push' model in GitOps?

What is the role of a 'Webhook' in a GitOps setup?

Which of the following is considered an 'Anti-pattern' in a GitOps workflow?

When configuring a GitOps tool, what is the purpose of a 'webhook' in relation to the Git repository?

You notice your GitOps operator is performing too many API calls to the Kubernetes API server. What is the most likely configuration issue?

Which of the following best describes the 'Declarative' principle in GitOps?

When troubleshooting a Kyverno policy, which command should you use to check if a specific resource complies with the policy?

Which TWO are common strategies for GitOps repo structure?

When implementing a GitOps workflow with Argo CD, what is the role of the 'AppProject' custom resource?

What is the purpose of a 'Kustomization' resource in a GitOps workflow?

Why must the desired state be 'versioned' in Git in a GitOps architecture?

In ArgoCD, what does the 'Revision' field in an Application manifest represent?

What is the purpose of a 'Sync Window' in Argo CD?

Which THREE of the following are necessary to prevent 'Secret Sprawl' in a multi-cluster environment? (Select three)

When using Argo CD, how do you handle applications that require resources to be created in a specific order (e.g., CRDs before Operators)?

What is an 'Image Updater' in the GitOps ecosystem?

When using Argo CD, what does the 'Sync Status' 'OutOfSync' indicate?

You are troubleshooting a multi-cluster Argo CD deployment where the 'staging' cluster is healthy but 'production' cluster is 'OutOfSync' despite having the same manifest source. Why might this happen?

A team is transitioning to GitOps. Which action best aligns with the principle of Declarative Desired State?

Your organization uses a 'Git-branch-per-environment' strategy. You notice that hotfixes applied to the 'production' branch are being overwritten by automatic merges from the 'staging' branch. Which GitOps promotion pattern should you adopt to prevent this drift?

Which statement best defines 'immutable state' in the context of GitOps?

An ArgoCD application is configured with 'SelfHeal' set to true. If a developer manually modifies a Deployment's replica count via kubectl, what happens?

During a blue-green deployment, what is the primary role of the traffic manager (e.g., Istio or Nginx Ingress)?

Why is 'Git' considered the 'source of truth' in GitOps?

You are using Flux with Kustomize. You want to apply different configurations for production and staging, but both use the same base manifests. Which Kustomize feature allows this?

In a multi-cluster environment, how does the GitOps principle of 'Declarative Desired State' simplify cluster management?

In a GitOps architecture, why is it critical that the entire state of the system is declarative?

Which THREE of the following items are commonly found in a Flux 'GitRepository' manifest?

What is the primary function of an 'Admission Controller' in a GitOps-based DevSecOps workflow?

A cluster is flagged as 'OutOfSync' in Argo CD. What does this status specifically indicate?

Which THREE of the following are primary benefits of adopting GitOps for CI/CD integration?

Which GitOps tool relies primarily on a pull-based model utilizing the 'Source Controller' and 'Kustomization' custom resources?

A DevOps team is storing its Kubernetes manifests in a Git repository. To adhere strictly to the principle of versioned and immutable desired state in Git, how should the team manage changes to an existing deployment's container image tag?

When considering the GitOps principle of 'Declarative Desired State', which TWO of the following statements accurately reflect why manifests should be stored in Git?

What is the impact of having multiple GitOps operators in the same cluster?

Which TWO of the following are common challenges when implementing GitOps in an organization?

In an Argo CD deployment, a developer notices that manual changes made via kubectl are being reverted automatically. What feature is responsible for this behavior?

In GitOps, what is a 'Merge Request' (or Pull Request) used for?

In an Argo CD 'Application' manifest, what does the 'destination' field specify?

When using a GitOps operator that performs 'image polling', what is the risk of using a 'latest' tag?

Which Argo CD feature allows you to manage multiple applications with shared configuration?

Which of these is NOT a principle of GitOps?

You are auditing your GitOps deployment strategy. Which TWO of the following statements correctly describe the 'Source of Truth' in a GitOps architecture?

Your platform team runs a GitOps operator that continuously reconciles a Kubernetes cluster against a Git repository. A compliance auditor asks how you can prove that no unapproved manual changes have been applied to production over the last 90 days. Which practice should you implement to satisfy this requirement?

You are running Argo CD on a Kubernetes cluster. A developer reports that the argocd-application-controller repeatedly logs 'Failed to load target state: rpc error: code = Unknown desc = comparison error' for one Application, and the Application is stuck in the 'Unknown' health state. The cluster's outbound internet access is blocked, and the Application sources manifests from a private Git repository over HTTPS. Which component of Argo CD must you check first to resolve this?

Which TWO of the following are valid ways to configure an Argo CD 'Application'?

You have a large ArgoCD installation and want to limit the blast radius. Which feature allows you to restrict which namespaces an application can deploy to?

In a multi-cluster GitOps architecture using Argo CD, how do you manage credentials for a remote cluster that is not the cluster where Argo CD resides?

What is the main advantage of using a 'Declarative' approach to system management?

A company transitions from a push-based CI/CD pipeline (using Jenkins) to a pull-based GitOps model (using Flux). What is the primary security architectural change regarding cluster access?

When a manual change is made directly to a Kubernetes Service via 'kubectl edit', what behavior is expected from a properly configured GitOps operator set to 'Automatic Sync'?

Why is 'pull-based' reconciliation considered more secure than 'push-based' CI/CD?

Which TWO of the following are valid ways to trigger a sync in ArgoCD?

You are using a 'Pull' based GitOps model (e.g., Flux or Argo CD). Why is it considered more secure than a 'Push' based CI/CD model?

Which THREE of the following are common methods for managing secrets in a GitOps workflow?

A platform team runs a GitOps operator that continuously reconciles cluster state from a Git repository. A compliance auditor asks how the team can prove which commit produced the configuration currently running in production six weeks ago, after many merges and rollbacks. Which practice best satisfies this requirement?

A platform team runs Argo CD against a Git repository that holds Helm charts for a production cluster. During an incident, an SRE patches a Deployment directly with `kubectl set image` to roll back a bad release. Two minutes later the Deployment is back on the bad image. Which GitOps concept explains why the manual patch did not persist?

Which THREE components are typically involved in a GitOps reconciliation loop?

You are implementing progressive delivery with Flagger. You notice that the canary analysis is failing despite the new version being stable. What is the most common reason for this?

You are using Flux and want to pause reconciliation for a specific application without deleting the resource. Which field should you modify?

You are using ArgoCD and need to ensure that secret values stored in Git via Sealed Secrets are decrypted only within the target cluster. What component performs the actual decryption of a SealedSecret resource?

You are debugging a drift in a GitOps environment. The cluster state differs from the Git repository. What is the most likely cause if you are using Flux?

How do you handle 'Environment-specific' configurations in a GitOps repository?

When syncing a Git repository to a cluster, what is the 'Sync Policy' in Argo CD?

You are configuring an Argo CD application. After a developer manually modifies a Kubernetes Service via kubectl, the application status changes to 'OutOfSync'. Which GitOps principle is this monitoring process specifically identifying?

What does the 'prune' policy in GitOps do?

Which THREE components are essential for a complete GitOps CI/CD pipeline?

Which TWO of the following tools allow for GitOps policy enforcement?

You are using Flux to manage a multi-tenant cluster. You want to enforce that all Kustomizations in a specific namespace can only deploy resources that are allowed by a policy. You have decided to use OPA Gatekeeper. Which two resources are required to define and enforce a policy in Gatekeeper? (Choose two.)

Which TWO of the following are core principles of the GitOps model?

Which GitOps tool is primarily associated with the 'pull' deployment model?

A team is reviewing their deployment practices against OpenGitOps standards. Which THREE conditions are required to satisfy the 'Declarative Desired State' and 'Versioned and Immutable State' principles?

Your team is using a pull-based GitOps pattern. Which component is responsible for initiating the communication to the Git repository to check for updates?

Which TWO are common pitfalls in a GitOps implementation?

Which of these is a primary benefit of 'Infrastructure as Code' (IaC) in a GitOps workflow?

Which TWO of the following help ensure successful multi-cluster GitOps rollouts? (Select two)

Which THREE of the following represent advanced GitOps patterns for multi-cluster management? (Select three)

In the context of GitOps, what is meant by 'Pull-based' architecture?

In the context of GitOps, what is the primary role of the 'Source of Truth'?

Which THREE actions occur when a GitOps controller detects drift?

A platform team manages 50 Kubernetes clusters using GitOps. They need to ensure that an emergency rollback of an application across all clusters can be executed cleanly and audited effectively. What is the standard GitOps mechanism to achieve this rollback?

Which THREE of these are valid methods for handling configuration differences across environments (e.g., Dev vs Prod)?

An application is configured with 'Automated Sync'. What happens when a developer merges a change to the main branch?

Which action should a developer take to deploy a new version of an application in a GitOps-based workflow?

You are using Argo CD to manage a production application. A developer accidentally commits a change that sets the replica count to zero, and the change is merged to the main branch. You want to prevent this from happening again without blocking all changes to the repository. Which GitOps pattern should you implement?

You are debugging a flux-system reconciliation loop. You notice the Kustomization is stuck in 'Retrying'. What command shows the current status and reason for the failure?

A platform engineer wants to configure an application state declaratively. They write an imperative script containing commands like 'kubectl scale deployment --replicas=5' and push this script into a Git repository for execution by a cron job. Why does this approach fail to satisfy the core GitOps principle of 'Declarative Desired State'?

You have a Git repository that contains multiple Kustomizations. You want Flux to update all of them based on a single trigger. How should you structure the repository?

When configuring an App-of-Apps pattern, which field in the 'Application' manifest controls the order in which child applications are deployed?

A company uses Terraform for IaC and Argo CD for application delivery. How should they manage the dependency between infrastructure provisioning and app deployment to ensure GitOps consistency?

Your organization requires an audit trail of all changes to infrastructure. Why is GitOps superior to imperative 'kubectl' commands for this?

When implementing a CI/CD pipeline for GitOps, how should you handle image tag updates?

Which THREE activities are part of the 'Automated Pull-Based Reconciliation' process?

Which of the following is a potential downside of using a 'Pull' model?

Which TWO scenarios represent 'drift' in a GitOps environment?

You are using OPA Gatekeeper with GitOps. You want to prevent any deployment that does not have an 'owner' label. Where should this policy be applied to ensure it is enforced for all GitOps-driven changes?

Which TWO of the following are core components of a mature GitOps-based DevSecOps practice?

Which TWO of the following are primary benefits of storing the entire desired state of a system in a versioned Git repository?

What is the primary function of a 'GitOps Pipeline' versus a 'GitOps Controller'?

Which TWO items are typically included in a GitOps repository?

You are using ArgoCD and need to ensure that a Helm chart is rendered correctly with a specific set of values. Where do you specify these values in the ArgoCD Application resource?

Which THREE of the following represent common symptoms of 'drift' in a GitOps-managed cluster?

What happens if the 'revision' in an Argo CD Application points to a branch that does not exist?

In a GitOps workflow, where does the 'source of truth' reside?

You want to use Helm for your GitOps deployments. Where should the 'values.yaml' file reside for environment-specific overrides?

What is the primary benefit of using a pull-based GitOps operator compared to a push-based CI/CD system?

Which of the following describes the 'Declarative' aspect of GitOps?

Why do you use a separate repository for application code and application manifests (deployment manifests) in GitOps?

Which THREE of the following are valid components of the ArgoCD architecture?

During an audit, an organization discovers that a secret was accidentally committed to a Git repository managed by Flux. An engineer deletes the commit containing the secret using 'git push --force' with a rewritten history. Why is this action problematic in a production GitOps environment?

When migrating to GitOps, why is 'Pull' preferred over 'Push' for CD?

Which THREE of the following are benefits of using the App-of-Apps pattern? (Select THREE)

Which TWO of the following are considered advantages of the GitOps approach?

Which THREE factors should be considered when choosing a GitOps controller?

What is the key difference between Configuration as Code and Infrastructure as Code in the context of GitOps?

What is the most effective approach to handle 'secrets' in GitOps when you require strict compliance that mandates secrets never exist in plain text in the repo?

You are migrating a legacy application deployment process to GitOps. The application requires a specific sequence of database migrations to run before the new container version is deployed. How do you implement this in a GitOps-friendly way?

Your team is using Flux CD to manage Kubernetes resources. You notice that the application status is 'Suspended'. What is the most likely reason for this state in the context of GitOps principles?

Which of these is a primary reason for using Helm charts in a GitOps workflow?

You are performing a Canary deployment using Argo Rollouts. You notice that the analysis template is failing even though the metrics are within range. What is the most common cause of this in a GitOps workflow?

In a GitOps environment, what is the 'Reconciliation Loop' primarily responsible for?

Why should you avoid using 'latest' as a container image tag in GitOps?

Which TWO of the following are considered 'Anti-Patterns' in a GitOps workflow? (Choose two)

In a GitOps pattern, how do you manage a rollback when an application deployment fails?

Which THREE items should be excluded from a GitOps repository?

An organization separates its GitOps repositories into an application repo and an environment configuration repo. Developers merge frequently into the application repo, while the environment repo pins image digests. A release engineer must promote a tested build from staging to production. Which action aligns with this separation of concerns?

You are auditing a GitOps process. Which of the following is an indicator that the process is NOT truly following GitOps principles?

You notice that your GitOps pipeline is stuck in a loop. What is the most likely cause?

What is the primary role of a 'GitOps controller'?

Which TWO aspects of GitOps help ensure 'Continuous Drift Detection'?

Which TWO of the following are benefits of using Git as the 'Source of Truth'?

What is the purpose of 'Image Tagging' in a GitOps workflow?

Which THREE of the following are common components of a GitOps platform?

Which TWO of the following are characteristics of a 'GitOps Operator'?

Which of these is a typical 'Desired State' artifact in GitOps?

What is the primary risk of a 'Push-based' deployment model compared to 'Pull-based'?

Your team is integrating a CI pipeline with a GitOps delivery model. Which of the following tasks should remain in the CI pipeline, and which should be moved to the CD/GitOps reconciliation process?

What happens if the Git repository is temporarily unavailable during a sync cycle?

In a GitOps promotion pipeline, why is it recommended to tag container images with a unique Git commit SHA instead of 'latest'?

Your organization uses a 'GitOps Operator' to manage deployments. What happens if a developer manually changes a configuration on the Kubernetes cluster using 'kubectl edit'?

What is the primary function of the 'reconciliation loop' in GitOps?

If a GitOps controller detects that an image tag has been changed in the cluster but not in Git, what does the controller do?

Which term best describes the process of ensuring the live cluster matches the desired state stored in Git?

How does GitOps help with disaster recovery?

Which THREE of the following are common tasks performed by a GitOps Operator? (Choose three)

A financial services firm deploys Argo CD to manage three production clusters. Auditors ask how the firm can prove that no unauthorized change reached production in the last quarter. Which GitOps property most directly satisfies this audit requirement?

When deploying across multiple clusters using Argo CD, you need to ensure that specific secrets are only available to clusters located in the 'us-east' region. Which resource should you use to enforce this segregation?

You are troubleshooting a Flux installation. The operator is failing to pull updates from a private GitHub repository. What component is most likely misconfigured?

Which TWO of the following are features of progressive delivery in GitOps? (Select two)

What does the 'prune' setting in a GitOps controller do?

Which THREE of the following actions occur during an ArgoCD sync operation?

Which THREE of the following are essential components of an effective GitOps 'Continuous Drift Detection and Correction' strategy?

What is the best way to handle temporary, non-production overrides in a GitOps environment?

Which TWO of the following are valid strategies for promoting an application from staging to production in GitOps? (Select two)

Which TWO of the following are common GitOps terminology used to describe the state of an application?

Which of these is a valid 'GitOps' approach for multi-environment management?

What is the primary benefit of version controlling your cluster manifests?

You are using Kustomize 'overlays' for environment promotion. If you need to add a specific label to all resources in production but not in staging, where should you define it?

What is the primary benefit of using a 'Git Branch' promotion pattern over a 'Directory-based' promotion pattern?

You are managing a large-scale deployment using the App-of-Apps pattern in Argo CD. Which resource type do you primarily use as the parent application to reference child application manifests?

A company is adopting GitOps and wants to ensure their implementation follows the core principles. They are reviewing their current practices and need to identify which of the following are considered core GitOps principles. (Choose two.)

What is the purpose of the 'SealedSecrets' custom resource?

You have a GitOps pipeline where you want to promote a change from Staging to Production. Using Argo CD, what is the recommended way to perform this promotion?

In the context of 'Configuration as Code', why is it considered a best practice to use a declarative manifest format (like YAML) rather than imperative commands?

A DevOps team is adopting GitOps for their Kubernetes environment. They want to ensure that all changes to the cluster are made through Git, and that the cluster state is always in sync with the Git repository. They also want to avoid manual kubectl commands. Which GitOps principle is most directly violated if a team member uses 'kubectl apply' to update a Deployment?

An organization uses Argo CD to manage Kubernetes clusters. A developer manually modifies a Deployment's replica count via kubectl. Which mechanism in Argo CD ensures this manual change is identified as non-compliant with the GitOps repository?

What does 'Declarative Configuration' imply in GitOps?

Which THREE of the following are essential security practices for GitOps? (Select three)

What does the status 'Healthy' mean in an Argo CD application?

A company uses Flux to manage a Kubernetes cluster. During a recent security audit, they found that an engineer manually edited a ConfigMap directly in the live cluster using 'kubectl edit', causing the cluster state to drift from the Git repository. The engineer wants to ensure that such manual changes are automatically reverted to match Git. Which GitOps principle should they enforce?

Which tool provides the most native integration for managing Kubernetes manifests using Kustomize within a GitOps workflow?

You are configuring Flux to manage a multi-tenant cluster. You need to ensure that specific namespaces only allow images from an internal registry. Which tool should you use to enforce this at admission time?

Which of the following is a core principle of GitOps?

What is the primary role of the 'Reconciler' in a GitOps operator?

You are managing a GitOps repository that contains both application manifests and cluster-wide configurations. You want to ensure that changes to cluster-wide configurations are applied before application workloads during a sync. Which Argo CD feature should you use?

You are using Argo CD. A developer manually scales a Deployment replica count using 'kubectl scale'. What happens next in a standard GitOps implementation?

Which THREE of the following are benefits of the 'App-of-Apps' pattern? (Select three)

A developer pushes a change to Git, but the cluster does not update. Which log source is most effective for debugging the pull-based mechanism?

A team adopting GitOps wants to reduce the blast radius of a bad change and shorten mean time to recovery. They already store all manifests in Git and use an operator for reconciliation. Which practice most directly limits the impact of a faulty change reaching production?

In a GitOps environment using Argo CD, what is the primary purpose of the reconciliation loop?

A security auditor asks how your team handles secret management in a GitOps environment without exposing sensitive credentials in the Git repository. What is the standard GitOps practice for this requirement?

You are implementing a GitOps promotion workflow where each environment (dev, staging, prod) has its own Kubernetes namespace in a single cluster. Your team wants to keep the base manifests identical and only vary replicas, resource limits, and image tags per environment. Which pattern should you use to achieve this with minimal duplication?

Which TWO of the following are key features of the Flux Kustomization controller?

A team uses Flux to manage a cluster. They want the cluster to automatically apply new commits to a configuration repository without any external pipeline pushing to the cluster. Which Flux component and behavior accomplish this?

What is the primary role of an 'Immutable' state in a GitOps repository?

In the context of a CI/CD pipeline, where does the 'GitOps' bridge typically occur?

A team is designing a GitOps workflow and wants to enforce policy and compliance before changes reach production clusters. Which two practices fit a GitOps-aligned governance model? (Choose two.)

What is the primary role of the GitOps operator during the reconciliation phase?

You are using Flux with a GitRepository source that points to a private Git repository over HTTPS. Flux is failing to fetch the repository with an authentication error. You have created a Kubernetes Secret with the username and password. Which field in the GitRepository spec must reference this Secret?

Why does GitOps encourage the use of small, frequent commits?

A startup is adopting GitOps for its Kubernetes platform. The CTO asks the platform engineer to describe the defining property of the deployment model they are about to adopt. Which statement best captures the core GitOps principle?

When configuring a GitOps pipeline, what should be done to manage sensitive data like API keys?

What is the primary function of an 'ApplicationSet' in Argo CD?

An organization is migrating to GitOps using Argo CD. During an audit, you notice that manual changes made directly to the Kubernetes cluster via kubectl are being reverted within minutes. Which component of the GitOps pipeline is performing this action?

When should you use Kustomize in a GitOps workflow?

Which of the following is a primary benefit of using a GitOps pull-based model over a push-based CI/CD model?

You are implementing a GitOps workflow where the desired state is stored in a private repository. The Argo CD controller requires access to this repository. What is the most secure GitOps-compliant way to provide this access?

What happens when a resource's 'SyncPolicy' is set to 'Manual'?

What is the primary role of the 'Git' repository in the GitOps cycle?

You are using Argo Rollouts for progressive delivery. You want to execute a 'AnalysisRun' before switching traffic. Where is the 'AnalysisTemplate' defined?

In a multi-cluster GitOps environment, you are using the ApplicationSet controller with a 'Cluster Generator'. You need to add a new cluster dynamically without modifying the ApplicationSet manifest. How should you achieve this?

Your team wants to implement GitOps. Which of the following is a critical prerequisite for 'Drift Detection' to be effective?

When implementing multi-cluster GitOps, which THREE components are critical for success? (Select three)

Which THREE features of Kubernetes are commonly used to support GitOps?

Which THREE of the following are effective ways to handle 'Configuration Drift' in a GitOps environment? (Select three)

A team is transitioning from traditional imperative scripts to declarative Configuration as Code. Which approach best satisfies the GitOps principle of using a desired state definition?

Which of these is the most suitable tool to use as the 'Git' component of GitOps?

When promoting an application from staging to production using the 'GitOps directory' pattern, what is the most robust way to ensure environment-specific configurations are applied correctly?

Which TWO of the following are common pitfalls when integrating DevSecOps into a GitOps pipeline?

Which TWO of the following are essential when using Helm in a GitOps workflow? (Select two)

When using Kyverno, which THREE of the following can be used to validate Kubernetes resources?

Which TWO of the following are common benefits of using a 'GitOps Operator'? (Select two)

Which practice represents the 'DevSecOps' aspect in a GitOps pipeline?

You are configuring an automated GitOps pipeline. How do you prevent 'drift' from occurring due to out-of-band changes?

A platform team manages a Kubernetes cluster with Flux. They want to ensure that if the cluster's live state diverges from the Git repository, the system automatically corrects it without human intervention. Which GitOps concept does this describe?

Which mechanism is used in a GitOps workflow to ensure that a 'Canary' deployment successfully rolls back if error rates spike?

What is the primary function of an 'Operator' in the context of GitOps?

What is the difference between a 'Sync' and a 'Refresh' in Argo CD?

An application is failing because a developer accidentally edited a ConfigMap in the cluster directly. Which GitOps feature prevents this from recurring?

What is the impact of enabling 'selfHeal' in an Argo CD Application sync policy?

How does an operator manage 'Secrets' in a GitOps repository?

When using SOPS with Age, which THREE of the following are true regarding key management?

Why would you choose to use 'Kustomize' over 'Helm' in a GitOps workflow?

In a blue-green progressive delivery deployment using Flagger, you notice that the 'primary' service is not receiving traffic even after the analysis successfully completes. What is the most likely cause?

You are architecting a multi-cluster deployment. What is the benefit of using an 'Operator' based architecture over a standard CI/CD Push approach in this context?

You need to ensure that no one can modify cluster resources manually. How can you implement this in a GitOps-mature organization?

Which TWO of the following are NOT recommended in a GitOps workflow?

Which THREE of the following are valid ways to trigger a sync in a GitOps environment?

You are implementing GitOps for a legacy application. Why might this be challenging?

Which THREE of the following are core responsibilities of a GitOps operator?

In a GitOps environment, what is the role of a 'CI Pipeline'?

Which TWO practices are recommended when managing Git repositories for GitOps?

When using OPA Gatekeeper for policy enforcement, what resource is used to define the actual logic of the policy?

Which TWO of the following are common reasons for a deployment to be marked as 'Degraded' by Argo CD? (Select two)

Your organization wants to implement DevSecOps by integrating security scanning into a GitOps pipeline. Where should the vulnerability scan happen to prevent insecure configurations from ever reaching the cluster?

A team is implementing GitOps for their infrastructure. They want to ensure that the entire system state is described in a way that can be versioned, reviewed, and automatically applied. Which characteristic of GitOps best describes the practice of storing all configuration as code in Git?

You are managing a global cluster setup with GitOps. How do you handle configuration that must be identical across all clusters while allowing for regional variations?

A team wants to detect when someone manually edits a live resource so that the cluster diverges from Git. Their operator reconciles every five minutes. What is the most accurate statement about detection and remediation in this setup?

In a GitOps environment, what is the main purpose of maintaining Infrastructure as Code?

Which THREE of the following represent key concepts in 'GitOps'?

Which GitOps tool provides a dedicated CLI called 'argocd'?

What does the status 'OutOfSync' indicate in Argo CD?

If you want to view the history of changes made to your cluster configuration, where should you look in a GitOps model?

When evaluating ArgoCD vs Flux, which TWO of the following are distinct advantages of using Flux?

Which THREE of the following are benefits of using a GitOps operator for CD?

An organization is implementing GitOps across its infrastructure using Kubernetes and Flux. Which TWO statements accurately describe core characteristics of the 'Automated Pull-Based Reconciliation' principle?

Which TWO tools are commonly associated with the 'GitOps' ecosystem?

In a large enterprise, why is GitOps preferred for multi-cluster environments?

You are using Flux CD to manage a multi-tenant cluster. Each tenant has its own Git repository and namespace. You want to ensure that a tenant's Kustomization can only deploy resources into its own namespace and cannot modify cluster-scoped resources. Which Flux feature should you configure?

In a GitOps environment, what is the best strategy for managing external dependencies (like Helm charts)?

A developer updates a Helm release values file in Git to change a ConfigMap key. How does the GitOps pull-based agent determine that reconciliation is necessary?

When configuring Kyverno policies to secure a cluster, which TWO of the following actions can a policy perform?

When mapping traditional CI/CD to GitOps, which component from the traditional world is often 'decommissioned' or replaced?

Which TWO of the following are primary benefits of adopting a GitOps 'Pull' model compared to a 'Push' model? (Choose two)

Which THREE of the following are essential tasks when implementing SOPS with GitOps?

Which TWO of the following are true about ArgoCD ApplicationSets?

Which THREE of the following are common GitOps tools used in the CNCF ecosystem?

What is the recommended way to handle secrets in GitOps?

Which THREE strategies are effective for managing configuration at scale in a GitOps environment?

When a GitOps tool reports a 'Sync Error', what is the most likely cause?

When setting up a multi-cluster GitOps pattern, what is the benefit of using 'Cluster Labels' in ApplicationSets?

In a GitOps workflow, how does an operator handle a situation where a user manually deletes a resource that is defined in Git?

How does the GitOps pattern simplify the audit process for a regulatory environment?

When mapping a traditional CI/CD pipeline to GitOps, what is the primary role of the CD tool?

In GitOps, what does 'Self-Healing' mean?

Which THREE mechanisms can be used to notify a GitOps controller of a change in Git?

Which THREE items should be included in your Git repository for a standard GitOps setup?

You are debugging a GitOps deployment. The controller shows 'OutOfSync' but the cluster seems to be running correctly. What is the most likely cause?

Which of the following is considered 'best practice' for GitOps repository structure?

When managing multiple environments (dev/stage/prod) in one repository, which folder structure is generally considered best practice?

Which THREE are standard ways to implement GitOps with Helm?

An administrator notices that an engineer manually modified a Service loadBalancerIP in the Kubernetes live cluster using 'kubectl edit'. The cluster is managed by an automated GitOps engine configured in a pull-based model. What will happen during the next reconciliation cycle?

You are comparing GitOps deployment models. Which scenario best describes a 'Pull' deployment model?

Which of the following is NOT a benefit of the GitOps model?

What is a 'GitOps Operator'?

You are debugging an ArgoCD sync failure. You find the 'Sync Status' is 'Failed'. Where is the most detailed error information located?

Which TWO of the following best describe the benefits of adopting GitOps?

You are using Argo CD to deploy an application. You want to ensure that Argo CD automatically synchronizes the application whenever the Git repository changes. Which sync policy should you configure?

What is the relationship between the 'desired state' and the 'actual state' in GitOps?

Which TWO of the following are primary benefits of storing immutable state in Git?

You are managing secrets using SOPS with Age. You notice that Flux cannot decrypt the files. What is the most likely cause?

When migrating from ArgoCD to Flux, you want to replicate the 'Sync Waves' behavior. Which Flux feature provides equivalent control over the order of resource reconciliation?

Which TWO are examples of 'Drift' in a GitOps environment?

In GitOps, what should happen if a configuration file is deleted from the Git repository?

If you have a multi-cluster setup and you want to ensure that 'production' clusters only pull images from a hardened internal registry, how can you enforce this in GitOps?

A senior cloud architect is designing a multi-tenant platform using GitOps. They want to ensure that continuous drift detection and correction operate reliably without causing system instability. Which TWO practices help mitigate risks associated with automated continuous drift correction?

You are implementing a GitOps pipeline for a complex microservices architecture. To satisfy the principle of 'versioned and immutable state', how should you handle environment-specific configurations while maintaining a single source of truth?

In GitOps, what is the 'Source of Truth'?

Which TWO of the following are true about the 'Pull' model in GitOps? (Select two)

In a GitOps workflow, what is the best way to handle a configuration that must be different for production versus development clusters?

Which THREE of these practices are essential to successfully transition from traditional CI/CD to GitOps?

What is the purpose of 'App-of-Apps' pattern in Argo CD?

In a GitOps environment, an engineer manually deletes a Deployment via 'kubectl'. What should happen next to maintain the desired state?

Why is 'Git' used as the source of truth rather than a standard database?

You are troubleshooting a Flux controller that is not reconciling changes. The Git repository is updated, but the cluster remains unchanged. Which component should you inspect first to verify the 'automated pull-based reconciliation'?

Which THREE of the following are critical security considerations for a GitOps implementation?

Which TWO of the following are common GitOps challenges?

Which of the following actions best aligns with the GitOps principle of 'Automated Pull-Based Reconciliation'?

What is the primary advantage of storing Kubernetes manifests in a version-controlled repository?

A company is choosing between a push-based CI/CD pipeline (e.g., executing 'kubectl apply' from GitHub Actions) and a pull-based GitOps controller (e.g., Argo CD or Flux). Which security advantage is uniquely provided by adopting the pull-based architecture?

You are implementing a multi-environment strategy. Which Git branching strategy best supports GitOps?

Which TWO of the following are valid reasons to maintain a clear separation between the CI pipeline and the GitOps controller?

You are designing a multi-cluster deployment with Argo CD. You want to avoid defining 50 individual Application manifests. Which feature should you use?

Which of the following is a key advantage of using a 'pull' based GitOps model (like Flux or ArgoCD) over a 'push' based CI/CD pipeline?

When utilizing Git as the 'Source of Truth' for a cluster, what happens if the cluster state diverges from Git?

Which THREE components are essential for a robust pull-based GitOps deployment?

When defining a declarative desired state in Kubernetes, which attribute is essential to satisfy the 'declarative' principle?

When using an 'Image Updater' with a GitOps operator, what is the automated workflow?

Which THREE of the following are best practices for managing GitOps secrets?

Which TWO benefits does GitOps provide for team collaboration?

Which THREE principles are foundational to the GitOps model as defined by the CNCF GitOps Working Group?

Which TWO characteristics help ensure a GitOps repository is auditable?

An administrator notices that the 'sync' status of an Argo CD application is 'Synced' but the health status is 'Degraded'. What does this indicate?