Courseiva

CGOA · domain

Gitops Patterns

Practise CGOA NAT and PAT questions covering address translation types, inside/outside interface roles, static vs dynamic vs PAT, and troubleshooting missing or incorrect translations.

64 questions14 easy32 medium18 hard

Focused practice

Practice Gitops Patterns questions

Scored sessions drawing only from this domain — pick a length below.

Start 20-question practice test →

What this domain covers

What to know about Gitops Patterns

NAT questions usually test how private addresses are translated, when to use static NAT, dynamic NAT or PAT, and how inside/outside interfaces affect traffic flow.

Static NAT, dynamic NAT and PAT behaviour.

Inside local, inside global, outside local and outside global address meanings.

How NAT affects connectivity between private networks and public destinations.

How to troubleshoot NAT rules, ACL matches and interface direction.

Why learners struggle

Why Gitops Patterns questions are commonly missed

NAT questions are missed when learners confuse the four address types (inside local, inside global, outside local, outside global) or misapply the interface direction. A translation rule can look correct but still fail if the ACL, interface, or direction is wrong.

  • ·Inside local vs inside global — inside local is the private source, inside global is the translated public address
  • ·PAT overloads — many sources share one public IP using unique port numbers
  • ·Interface direction — ip nat inside and ip nat outside must be on the correct interfaces
  • ·Static NAT vs dynamic NAT vs PAT — each serves a different use case
  • ·The NAT ACL identifies traffic to translate, not traffic to permit or deny
  • ·A missing translation can look like a routing problem if the interfaces are misconfigured

Watch out for

Common Gitops Patterns exam traps

  • PAT allows many inside hosts to share one public address by using port numbers.
  • NAT rules depend on correct inside and outside interface configuration.
  • The ACL used for NAT identifies traffic to translate; it is not always a security filtering ACL.
  • Static NAT maps one private address to one public address, while PAT overloads translations.

Question index

All Gitops Patterns questions (64)

Click any question to see the full explanation, or start a practice session above.

1

What is the purpose of the 'destination' field in an Argo CD Application manifest?

Easy
2

You are deploying applications across multiple clusters using Argo CD. You want to implement a hub-and-spoke model where the central management cluster controls all edge clusters. Which THREE of the following are necessary to correctly configure this pattern?

Medium
3

In the context of GitOps, what is 'Configuration Drift'?

Easy
4

You notice your GitOps operator is performing too many API calls to the Kubernetes API server. What is the most likely configuration issue?

Medium
5

Which THREE of the following are necessary to prevent 'Secret Sprawl' in a multi-cluster environment? (Select three)

Hard
6

When using Argo CD, how do you handle applications that require resources to be created in a specific order (e.g., CRDs before Operators)?

Hard
7

You are troubleshooting a multi-cluster Argo CD deployment where the 'staging' cluster is healthy but 'production' cluster is 'OutOfSync' despite having the same manifest source. Why might this happen?

Medium
8

Your organization uses a 'Git-branch-per-environment' strategy. You notice that hotfixes applied to the 'production' branch are being overwritten by automatic merges from the 'staging' branch. Which GitOps promotion pattern should you adopt to prevent this drift?

Hard
9

During a blue-green deployment, what is the primary role of the traffic manager (e.g., Istio or Nginx Ingress)?

Medium
10

Which THREE of the following are valid components or patterns used in Progressive Delivery with GitOps? (Select THREE)

Medium
11

You are implementing progressive delivery using Flagger. After a Canary resource is defined, which metric is most critical for Flagger to automatically rollback a deployment during a blue/green shift?

Hard
12

Which Argo CD feature allows you to manage multiple applications with shared configuration?

Medium
13

In a multi-cluster GitOps architecture using Argo CD, how do you manage credentials for a remote cluster that is not the cluster where Argo CD resides?

Medium
14

What is the main advantage of using a 'Declarative' approach to system management?

Easy
15

You are using a 'Pull' based GitOps model (e.g., Flux or Argo CD). Why is it considered more secure than a 'Push' based CI/CD model?

Hard
16

You want to promote a microservice from staging to production using the 'Git Branch' strategy. Which configuration allows you to ensure the exact same container image SHA is used across both environments?

Medium
17

You are implementing progressive delivery with Flagger. You notice that the canary analysis is failing despite the new version being stable. What is the most common reason for this?

Medium
18

What does the 'prune' policy in GitOps do?

Easy
19

In a multi-cluster environment, you are managing resources across 50 clusters. Which pattern prevents the 'Control Plane' bottleneck?

Hard
20

Your organization uses the App-of-Apps pattern in Argo CD to manage hundreds of microservices. You need to ensure that when a developer updates a repository structure, the root application automatically discovers and syncs new child applications without manual intervention. Which feature should be enabled in the Application resource?

Medium
21

Which TWO of the following help ensure successful multi-cluster GitOps rollouts? (Select two)

Medium
22

Which THREE of the following represent advanced GitOps patterns for multi-cluster management? (Select three)

Hard
23

When configuring an App-of-Apps pattern, which field in the 'Application' manifest controls the order in which child applications are deployed?

Hard
24

What happens if the 'revision' in an Argo CD Application points to a branch that does not exist?

Medium
25

You want to use Helm for your GitOps deployments. Where should the 'values.yaml' file reside for environment-specific overrides?

Medium
26

Which THREE of the following are benefits of using the App-of-Apps pattern? (Select THREE)

Easy
27

You are performing a Canary deployment using Argo Rollouts. You notice that the analysis template is failing even though the metrics are within range. What is the most common cause of this in a GitOps workflow?

Medium
28

Which THREE of the following are true about 'Resource Hooks' in Argo CD? (Select three)

Hard
29

You are using the App-of-Apps pattern in Argo CD to manage hundreds of microservices. You notice that the parent application is stuck in a 'Syncing' state indefinitely. What is the most likely cause?

Medium
30

In a GitOps promotion pipeline, why is it recommended to tag container images with a unique Git commit SHA instead of 'latest'?

Medium
31

When deploying across multiple clusters using Argo CD, you need to ensure that specific secrets are only available to clusters located in the 'us-east' region. Which resource should you use to enforce this segregation?

Easy
32

Which TWO of the following are features of progressive delivery in GitOps? (Select two)

Medium
33

Which TWO of the following are valid strategies for promoting an application from staging to production in GitOps? (Select two)

Medium
34

You are using Kustomize 'overlays' for environment promotion. If you need to add a specific label to all resources in production but not in staging, where should you define it?

Medium
35

What is the primary benefit of using a 'Git Branch' promotion pattern over a 'Directory-based' promotion pattern?

Easy
36

You are managing a large-scale deployment using the App-of-Apps pattern in Argo CD. Which resource type do you primarily use as the parent application to reference child application manifests?

Easy
37

You have a GitOps pipeline where you want to promote a change from Staging to Production. Using Argo CD, what is the recommended way to perform this promotion?

Easy
38

Which THREE of the following are essential security practices for GitOps? (Select three)

Hard
39

Which of the following is a core principle of GitOps?

Easy
40

What is the primary role of the 'Reconciler' in a GitOps operator?

Easy
41

Which THREE of the following are benefits of the 'App-of-Apps' pattern? (Select three)

Medium
42

What is the primary function of an 'ApplicationSet' in Argo CD?

Medium
43

You are using Argo Rollouts for progressive delivery. You want to execute a 'AnalysisRun' before switching traffic. Where is the 'AnalysisTemplate' defined?

Hard
44

In a multi-cluster GitOps environment, you are using the ApplicationSet controller with a 'Cluster Generator'. You need to add a new cluster dynamically without modifying the ApplicationSet manifest. How should you achieve this?

Hard
45

When implementing multi-cluster GitOps, which THREE components are critical for success? (Select three)

Medium
46

Which THREE of the following are effective ways to handle 'Configuration Drift' in a GitOps environment? (Select three)

Medium
47

When promoting an application from staging to production using the 'GitOps directory' pattern, what is the most robust way to ensure environment-specific configurations are applied correctly?

Medium
48

Which TWO of the following are essential when using Helm in a GitOps workflow? (Select two)

Easy
49

Which TWO of the following are common benefits of using a 'GitOps Operator'? (Select two)

Medium
50

Which mechanism is used in a GitOps workflow to ensure that a 'Canary' deployment successfully rolls back if error rates spike?

Medium
51

What is the impact of enabling 'selfHeal' in an Argo CD Application sync policy?

Medium
52

Why would you choose to use 'Kustomize' over 'Helm' in a GitOps workflow?

Medium
53

In a blue-green progressive delivery deployment using Flagger, you notice that the 'primary' service is not receiving traffic even after the analysis successfully completes. What is the most likely cause?

Hard
54

Which TWO of the following are common reasons for a deployment to be marked as 'Degraded' by Argo CD? (Select two)

Medium
55

Which THREE of the following are standard ways to organize a Git repository for a multi-tenant environment? (Select three)

Medium
56

Which THREE of the following are common challenges when scaling GitOps to hundreds of clusters? (Select three)

Hard
57

Which TWO of the following configurations are necessary to ensure that GitOps-managed clusters in a multi-cluster setup remain isolated from one another? (Select TWO)

Hard
58

When setting up a multi-cluster GitOps pattern, what is the benefit of using 'Cluster Labels' in ApplicationSets?

Medium
59

When managing multiple environments (dev/stage/prod) in one repository, which folder structure is generally considered best practice?

Medium
60

In a multi-cluster GitOps setup using Argo CD, you need to ensure that specific secrets are only synced to a production cluster. Which approach is the most secure?

Hard
61

If you have a multi-cluster setup and you want to ensure that 'production' clusters only pull images from a hardened internal registry, how can you enforce this in GitOps?

Hard
62

In GitOps, what is the 'Source of Truth'?

Easy
63

Which TWO of the following are true about the 'Pull' model in GitOps? (Select two)

Easy
64

You are designing a multi-cluster deployment with Argo CD. You want to avoid defining 50 individual Application manifests. Which feature should you use?

Hard

Frequently asked questions

What does the Gitops Patterns domain cover on the CGOA exam?
NAT questions usually test how private addresses are translated, when to use static NAT, dynamic NAT or PAT, and how inside/outside interfaces affect traffic flow.
How many questions are in this domain?
This page lists all 64 Gitops Patterns questions in the CGOA question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
What is the best way to practise this domain?
Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
Can I practise only Gitops Patterns questions?
Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.
Certified GitOps Associate (CGOA, CNCF/Linux Foundation) (CGOA) Gitops Patterns Practice Questions