Focused practice
Practice Gitops Patterns questions
Scored sessions drawing only from this domain — pick a length below.
Start 20-question practice test →What this domain covers
What to know about Gitops Patterns
Why learners struggle
Why Gitops Patterns questions are commonly missed
NAT questions are missed when learners confuse the four address types (inside local, inside global, outside local, outside global) or misapply the interface direction. A translation rule can look correct but still fail if the ACL, interface, or direction is wrong.
- ·Inside local vs inside global — inside local is the private source, inside global is the translated public address
- ·PAT overloads — many sources share one public IP using unique port numbers
- ·Interface direction — ip nat inside and ip nat outside must be on the correct interfaces
- ·Static NAT vs dynamic NAT vs PAT — each serves a different use case
- ·The NAT ACL identifies traffic to translate, not traffic to permit or deny
- ·A missing translation can look like a routing problem if the interfaces are misconfigured
Watch out for
Common Gitops Patterns exam traps
- ▸PAT allows many inside hosts to share one public address by using port numbers.
- ▸NAT rules depend on correct inside and outside interface configuration.
- ▸The ACL used for NAT identifies traffic to translate; it is not always a security filtering ACL.
- ▸Static NAT maps one private address to one public address, while PAT overloads translations.
Question index
All Gitops Patterns questions (64)
Click any question to see the full explanation, or start a practice session above.
What is the purpose of the 'destination' field in an Argo CD Application manifest?
Easy2You are deploying applications across multiple clusters using Argo CD. You want to implement a hub-and-spoke model where the central management cluster controls all edge clusters. Which THREE of the following are necessary to correctly configure this pattern?
Medium3In the context of GitOps, what is 'Configuration Drift'?
Easy4You notice your GitOps operator is performing too many API calls to the Kubernetes API server. What is the most likely configuration issue?
Medium5Which THREE of the following are necessary to prevent 'Secret Sprawl' in a multi-cluster environment? (Select three)
Hard6When using Argo CD, how do you handle applications that require resources to be created in a specific order (e.g., CRDs before Operators)?
Hard7You are troubleshooting a multi-cluster Argo CD deployment where the 'staging' cluster is healthy but 'production' cluster is 'OutOfSync' despite having the same manifest source. Why might this happen?
Medium8Your organization uses a 'Git-branch-per-environment' strategy. You notice that hotfixes applied to the 'production' branch are being overwritten by automatic merges from the 'staging' branch. Which GitOps promotion pattern should you adopt to prevent this drift?
Hard9During a blue-green deployment, what is the primary role of the traffic manager (e.g., Istio or Nginx Ingress)?
Medium10Which THREE of the following are valid components or patterns used in Progressive Delivery with GitOps? (Select THREE)
Medium11You are implementing progressive delivery using Flagger. After a Canary resource is defined, which metric is most critical for Flagger to automatically rollback a deployment during a blue/green shift?
Hard12Which Argo CD feature allows you to manage multiple applications with shared configuration?
Medium13In a multi-cluster GitOps architecture using Argo CD, how do you manage credentials for a remote cluster that is not the cluster where Argo CD resides?
Medium14What is the main advantage of using a 'Declarative' approach to system management?
Easy15You are using a 'Pull' based GitOps model (e.g., Flux or Argo CD). Why is it considered more secure than a 'Push' based CI/CD model?
Hard16You want to promote a microservice from staging to production using the 'Git Branch' strategy. Which configuration allows you to ensure the exact same container image SHA is used across both environments?
Medium17You are implementing progressive delivery with Flagger. You notice that the canary analysis is failing despite the new version being stable. What is the most common reason for this?
Medium18What does the 'prune' policy in GitOps do?
Easy19In a multi-cluster environment, you are managing resources across 50 clusters. Which pattern prevents the 'Control Plane' bottleneck?
Hard20Your organization uses the App-of-Apps pattern in Argo CD to manage hundreds of microservices. You need to ensure that when a developer updates a repository structure, the root application automatically discovers and syncs new child applications without manual intervention. Which feature should be enabled in the Application resource?
Medium21Which TWO of the following help ensure successful multi-cluster GitOps rollouts? (Select two)
Medium22Which THREE of the following represent advanced GitOps patterns for multi-cluster management? (Select three)
Hard23When configuring an App-of-Apps pattern, which field in the 'Application' manifest controls the order in which child applications are deployed?
Hard24What happens if the 'revision' in an Argo CD Application points to a branch that does not exist?
Medium25You want to use Helm for your GitOps deployments. Where should the 'values.yaml' file reside for environment-specific overrides?
Medium26Which THREE of the following are benefits of using the App-of-Apps pattern? (Select THREE)
Easy27You are performing a Canary deployment using Argo Rollouts. You notice that the analysis template is failing even though the metrics are within range. What is the most common cause of this in a GitOps workflow?
Medium28Which THREE of the following are true about 'Resource Hooks' in Argo CD? (Select three)
Hard29You are using the App-of-Apps pattern in Argo CD to manage hundreds of microservices. You notice that the parent application is stuck in a 'Syncing' state indefinitely. What is the most likely cause?
Medium30In a GitOps promotion pipeline, why is it recommended to tag container images with a unique Git commit SHA instead of 'latest'?
Medium31When deploying across multiple clusters using Argo CD, you need to ensure that specific secrets are only available to clusters located in the 'us-east' region. Which resource should you use to enforce this segregation?
Easy32Which TWO of the following are features of progressive delivery in GitOps? (Select two)
Medium33Which TWO of the following are valid strategies for promoting an application from staging to production in GitOps? (Select two)
Medium34You are using Kustomize 'overlays' for environment promotion. If you need to add a specific label to all resources in production but not in staging, where should you define it?
Medium35What is the primary benefit of using a 'Git Branch' promotion pattern over a 'Directory-based' promotion pattern?
Easy36You are managing a large-scale deployment using the App-of-Apps pattern in Argo CD. Which resource type do you primarily use as the parent application to reference child application manifests?
Easy37You have a GitOps pipeline where you want to promote a change from Staging to Production. Using Argo CD, what is the recommended way to perform this promotion?
Easy38Which THREE of the following are essential security practices for GitOps? (Select three)
Hard39Which of the following is a core principle of GitOps?
Easy40What is the primary role of the 'Reconciler' in a GitOps operator?
Easy41Which THREE of the following are benefits of the 'App-of-Apps' pattern? (Select three)
Medium42What is the primary function of an 'ApplicationSet' in Argo CD?
Medium43You are using Argo Rollouts for progressive delivery. You want to execute a 'AnalysisRun' before switching traffic. Where is the 'AnalysisTemplate' defined?
Hard44In a multi-cluster GitOps environment, you are using the ApplicationSet controller with a 'Cluster Generator'. You need to add a new cluster dynamically without modifying the ApplicationSet manifest. How should you achieve this?
Hard45When implementing multi-cluster GitOps, which THREE components are critical for success? (Select three)
Medium46Which THREE of the following are effective ways to handle 'Configuration Drift' in a GitOps environment? (Select three)
Medium47When promoting an application from staging to production using the 'GitOps directory' pattern, what is the most robust way to ensure environment-specific configurations are applied correctly?
Medium48Which TWO of the following are essential when using Helm in a GitOps workflow? (Select two)
Easy49Which TWO of the following are common benefits of using a 'GitOps Operator'? (Select two)
Medium50Which mechanism is used in a GitOps workflow to ensure that a 'Canary' deployment successfully rolls back if error rates spike?
Medium51What is the impact of enabling 'selfHeal' in an Argo CD Application sync policy?
Medium52Why would you choose to use 'Kustomize' over 'Helm' in a GitOps workflow?
Medium53In a blue-green progressive delivery deployment using Flagger, you notice that the 'primary' service is not receiving traffic even after the analysis successfully completes. What is the most likely cause?
Hard54Which TWO of the following are common reasons for a deployment to be marked as 'Degraded' by Argo CD? (Select two)
Medium55Which THREE of the following are standard ways to organize a Git repository for a multi-tenant environment? (Select three)
Medium56Which THREE of the following are common challenges when scaling GitOps to hundreds of clusters? (Select three)
Hard57Which TWO of the following configurations are necessary to ensure that GitOps-managed clusters in a multi-cluster setup remain isolated from one another? (Select TWO)
Hard58When setting up a multi-cluster GitOps pattern, what is the benefit of using 'Cluster Labels' in ApplicationSets?
Medium59When managing multiple environments (dev/stage/prod) in one repository, which folder structure is generally considered best practice?
Medium60In a multi-cluster GitOps setup using Argo CD, you need to ensure that specific secrets are only synced to a production cluster. Which approach is the most secure?
Hard61If you have a multi-cluster setup and you want to ensure that 'production' clusters only pull images from a hardened internal registry, how can you enforce this in GitOps?
Hard62In GitOps, what is the 'Source of Truth'?
Easy63Which TWO of the following are true about the 'Pull' model in GitOps? (Select two)
Easy64You are designing a multi-cluster deployment with Argo CD. You want to avoid defining 50 individual Application manifests. Which feature should you use?
HardOther domains
All CGOA exam domains
Frequently asked questions
- What does the Gitops Patterns domain cover on the CGOA exam?
- NAT questions usually test how private addresses are translated, when to use static NAT, dynamic NAT or PAT, and how inside/outside interfaces affect traffic flow.
- How many questions are in this domain?
- This page lists all 64 Gitops Patterns questions in the CGOA question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
- What is the best way to practise this domain?
- Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
- Can I practise only Gitops Patterns questions?
- Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.