CGOA · domain
Related Practices
Practise Certified GitOps Associate (CGOA, CNCF/Linux Foundation) (CGOA) Related Practices practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.
Focused practice
Practice Related Practices questions
Scored sessions drawing only from this domain — pick a length below.
Start 20-question practice test →What this domain covers
What to know about Related Practices
Related Practices questions test whether you can apply the concept in context, not just recognise a definition.
How the topic appears in realistic exam-style scenarios.
Which detail in the question changes the correct answer.
How to eliminate plausible but wrong options.
How to connect the question back to the wider exam objective.
Watch out for
Common Related Practices exam traps
- ▸Answering from memory before reading the full scenario.
- ▸Missing a constraint such as cost, availability, security, scope or command context.
- ▸Choosing a broad answer when the question asks for the most specific fix.
- ▸Ignoring why the wrong options are tempting.
Question index
All Related Practices questions (52)
Click any question to see the full explanation, or start a practice session above.
When implementing DevSecOps within a GitOps workflow, where should the automated policy enforcement (like OPA/Gatekeeper) occur?
Hard2Why is 'Git' considered the 'source of truth' in GitOps?
Easy3What is the primary function of an 'Admission Controller' in a GitOps-based DevSecOps workflow?
Easy4Which THREE of the following are primary benefits of adopting GitOps for CI/CD integration?
Medium5Which TWO of the following are common challenges when implementing GitOps in an organization?
Hard6When using a GitOps operator that performs 'image polling', what is the risk of using a 'latest' tag?
Hard7You are debugging a drift in a GitOps environment. The cluster state differs from the Git repository. What is the most likely cause if you are using Flux?
Hard8Your organization is transitioning from imperative scripts to Infrastructure as Code (IaC) using Terraform. You need to ensure that the infrastructure state remains synchronized with the Git repository after every commit. Which approach best aligns with GitOps principles?
Medium9Which THREE components are essential for a complete GitOps CI/CD pipeline?
Medium10Which TWO of the following are core principles of the GitOps model?
Easy11Which of these is a primary benefit of 'Infrastructure as Code' (IaC) in a GitOps workflow?
Easy12Which action should a developer take to deploy a new version of an application in a GitOps-based workflow?
Easy13A company uses Terraform for IaC and Argo CD for application delivery. How should they manage the dependency between infrastructure provisioning and app deployment to ensure GitOps consistency?
Hard14When implementing a CI/CD pipeline for GitOps, how should you handle image tag updates?
Medium15Which TWO of the following are core components of a mature GitOps-based DevSecOps practice?
Easy16What is the primary benefit of using a pull-based GitOps operator compared to a push-based CI/CD system?
Easy17Which of the following describes the 'Declarative' aspect of GitOps?
Easy18Why do you use a separate repository for application code and application manifests (deployment manifests) in GitOps?
Medium19When migrating to GitOps, why is 'Pull' preferred over 'Push' for CD?
Medium20What is the key difference between Configuration as Code and Infrastructure as Code in the context of GitOps?
Easy21What is the most effective approach to handle 'secrets' in GitOps when you require strict compliance that mandates secrets never exist in plain text in the repo?
Hard22You are migrating a legacy application deployment process to GitOps. The application requires a specific sequence of database migrations to run before the new container version is deployed. How do you implement this in a GitOps-friendly way?
Hard23In a GitOps pattern, how do you manage a rollback when an application deployment fails?
Hard24You are auditing a GitOps process. Which of the following is an indicator that the process is NOT truly following GitOps principles?
Medium25You notice that your GitOps pipeline is stuck in a loop. What is the most likely cause?
Hard26Your team is integrating a CI pipeline with a GitOps delivery model. Which of the following tasks should remain in the CI pipeline, and which should be moved to the CD/GitOps reconciliation process?
Easy27Your organization uses a 'GitOps Operator' to manage deployments. What happens if a developer manually changes a configuration on the Kubernetes cluster using 'kubectl edit'?
Medium28What is the best way to handle temporary, non-production overrides in a GitOps environment?
Medium29In the context of 'Configuration as Code', why is it considered a best practice to use a declarative manifest format (like YAML) rather than imperative commands?
Easy30Which tool provides the most native integration for managing Kubernetes manifests using Kustomize within a GitOps workflow?
Medium31Which scenario demonstrates the most effective way to manage environment-specific configurations in a large-scale GitOps setup?
Medium32A security auditor asks how your team handles secret management in a GitOps environment without exposing sensitive credentials in the Git repository. What is the standard GitOps practice for this requirement?
Medium33In the context of a CI/CD pipeline, where does the 'GitOps' bridge typically occur?
Easy34What is the primary role of the GitOps operator during the reconciliation phase?
Easy35When configuring a GitOps pipeline, what should be done to manage sensitive data like API keys?
Medium36When implementing GitOps, what is the 'GitOps Operator' pattern specifically meant to solve?
Hard37A team is transitioning from traditional imperative scripts to declarative Configuration as Code. Which approach best satisfies the GitOps principle of using a desired state definition?
Easy38Which TWO of the following are common pitfalls when integrating DevSecOps into a GitOps pipeline?
Medium39Which practice represents the 'DevSecOps' aspect in a GitOps pipeline?
Medium40Your organization wants to implement DevSecOps by integrating security scanning into a GitOps pipeline. Where should the vulnerability scan happen to prevent insecure configurations from ever reaching the cluster?
Medium41You are managing a global cluster setup with GitOps. How do you handle configuration that must be identical across all clusters while allowing for regional variations?
Hard42In a GitOps environment, what is the main purpose of maintaining Infrastructure as Code?
Easy43In a GitOps environment, what is the best strategy for managing external dependencies (like Helm charts)?
Medium44When mapping traditional CI/CD to GitOps, which component from the traditional world is often 'decommissioned' or replaced?
Medium45Which THREE strategies are effective for managing configuration at scale in a GitOps environment?
Hard46How does the GitOps pattern simplify the audit process for a regulatory environment?
Hard47When mapping a traditional CI/CD pipeline to GitOps, what is the primary role of the CD tool?
Medium48Which THREE items should be included in your Git repository for a standard GitOps setup?
Medium49Which TWO of the following best describe the benefits of adopting GitOps?
Easy50Which THREE of these practices are essential to successfully transition from traditional CI/CD to GitOps?
Hard51You are implementing a multi-environment strategy. Which Git branching strategy best supports GitOps?
Hard52Which TWO of the following are valid reasons to maintain a clear separation between the CI pipeline and the GitOps controller?
HardOther domains
All CGOA exam domains
Frequently asked questions
- What does the Related Practices domain cover on the CGOA exam?
- Related Practices questions test whether you can apply the concept in context, not just recognise a definition.
- How many questions are in this domain?
- This page lists all 52 Related Practices questions in the CGOA question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
- What is the best way to practise this domain?
- Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
- Can I practise only Related Practices questions?
- Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.