Tooling

When troubleshooting a Kyverno policy, which command should you use to check if a specific resource complies with the policy?

In ArgoCD, what does the 'Revision' field in an Application manifest represent?

An ArgoCD application is configured with 'SelfHeal' set to true. If a developer manually modifies a Deployment's replica count via kubectl, what happens?

You are using Flux with Kustomize. You want to apply different configurations for production and staging, but both use the same base manifests. Which Kustomize feature allows this?

Which THREE of the following items are commonly found in a Flux 'GitRepository' manifest?

Which GitOps tool relies primarily on a pull-based model utilizing the 'Source Controller' and 'Kustomization' custom resources?

You have a large ArgoCD installation and want to limit the blast radius. Which feature allows you to restrict which namespaces an application can deploy to?

Which TWO of the following are valid ways to trigger a sync in ArgoCD?

Which THREE of the following are common methods for managing secrets in a GitOps workflow?

You are using Flux and want to pause reconciliation for a specific application without deleting the resource. Which field should you modify?

You are using ArgoCD and need to ensure that secret values stored in Git via Sealed Secrets are decrypted only within the target cluster. What component performs the actual decryption of a SealedSecret resource?

Which TWO of the following tools allow for GitOps policy enforcement?

Your organization requires that all Kubernetes manifest changes be signed and encrypted before being pushed to Git. Which tool is primarily designed for this 'at-rest' encryption approach?

You are using ArgoCD and need to inject a value into a manifest that is not present in Git, such as a temporary credential. Which feature would you use to do this dynamic injection?

You are debugging a flux-system reconciliation loop. You notice the Kustomization is stuck in 'Retrying'. What command shows the current status and reason for the failure?

You have a Git repository that contains multiple Kustomizations. You want Flux to update all of them based on a single trigger. How should you structure the repository?

You are using OPA Gatekeeper with GitOps. You want to prevent any deployment that does not have an 'owner' label. Where should this policy be applied to ensure it is enforced for all GitOps-driven changes?

You are using ArgoCD and need to ensure that a Helm chart is rendered correctly with a specific set of values. Where do you specify these values in the ArgoCD Application resource?

Which THREE of the following are valid components of the ArgoCD architecture?

What is the primary function of the Flux Image Reflector Controller?

Which of these is a primary reason for using Helm charts in a GitOps workflow?

Which THREE of the following actions occur during an ArgoCD sync operation?

What is the purpose of the 'SealedSecrets' custom resource?

You are configuring Flux to manage a multi-tenant cluster. You need to ensure that specific namespaces only allow images from an internal registry. Which tool should you use to enforce this at admission time?

Which TWO of the following are key features of the Flux Kustomization controller?

What is a 'GitOps Operator'?

When using Kyverno, which THREE of the following can be used to validate Kubernetes resources?

When using SOPS with Age, which THREE of the following are true regarding key management?

You are using ArgoCD to deploy an application. You notice that the Application status remains 'OutOfSync' even after manual refreshes. Which feature should you examine to determine if the controller is failing to reach the cluster API?

When using OPA Gatekeeper for policy enforcement, what resource is used to define the actual logic of the policy?

Which GitOps tool provides a dedicated CLI called 'argocd'?

When evaluating ArgoCD vs Flux, which TWO of the following are distinct advantages of using Flux?

When configuring Kyverno policies to secure a cluster, which TWO of the following actions can a policy perform?

Which THREE of the following are essential tasks when implementing SOPS with GitOps?

Which TWO of the following are true about ArgoCD ApplicationSets?

In an ArgoCD environment, you notice that a specific set of resources is being ignored during sync. What field in the 'argocd-cm' ConfigMap or the Application manifest is likely responsible?

You are debugging an ArgoCD sync failure. You find the 'Sync Status' is 'Failed'. Where is the most detailed error information located?

You are managing secrets using SOPS with Age. You notice that Flux cannot decrypt the files. What is the most likely cause?

When migrating from ArgoCD to Flux, you want to replicate the 'Sync Waves' behavior. Which Flux feature provides equivalent control over the order of resource reconciliation?

In a GitOps workflow, what is the best way to handle a configuration that must be different for production versus development clusters?

Which TWO of the following are common GitOps challenges?

Which of the following is a key advantage of using a 'pull' based GitOps model (like Flux or ArgoCD) over a 'push' based CI/CD pipeline?