Courseiva

KCNA Cloud Native Application Delivery Practice Question

An organization uses Flux with Kustomize to manage their Kubernetes applications. They want to automatically update their deployment when a new container image is pushed to the registry. Which Flux component should they use?

⚠ Common exam trap

KCNA often tests the distinction between Flux controllers, and candidates may confuse the Image Automation Controller with the Source Controller or Kustomize Controller, forgetting that only the Image Automation Controller actively monitors registries and updates manifests.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Image Automation Controller

The Image Automation Controller is specifically designed to watch container registries for new image tags and automatically update Kubernetes manifests (like Kustomize overlays) with the new image reference. It works in conjunction with the Image Reflector Controller to scan registries and the Image Policy to select the desired tag. Once a new image is detected and selected, the Image Automation Controller commits the updated image tag back to the Git repository, which Flux then reconciles. This enables a fully automated GitOps workflow for image updates.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    Source Controller

    Why it's wrong here

    The Source Controller only fetches and watches artefacts such as Git repositories, OCI images and Helm charts; it does not scan registries for new tags. Image automation belongs to the Image Reflector and Image Automation Controllers, which commit updated tags back to Git. Source Controller would be right for syncing manifests, not triggering image updates.

  • ✓

    Image Automation Controller

    Why this is correct

    The Image Automation Controller scans image repositories and, when it detects a newly pushed tag matching policy, commits the updated image reference back to Git, which Flux then reconciles. This delivers the automatic deployment update the organisation wants.

  • ✗

    Helm Controller

    Why it's wrong here

    The Helm Controller reconciles HelmRelease objects, so it manages chart releases rather than watching registries for new image tags. It is tempting because it automates deployments, but it would be the right choice when deploying or upgrading packaged Helm charts from a chart repository, not for image-tag-driven updates.

  • ✗

    Kustomize Controller

    Why it's wrong here

    Kustomize Controller reconciles Kustomization objects, building and applying manifests from a source; it does not watch registries for new image tags. It is tempting because it handles the deployment half of GitOps, and would be correct for applying Kustomize overlays or patching manifests after a source change, not for triggering on image push.

Go deeper

Related to this question

About these practice questions

This KCNA question is part of Courseiva's 930-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed September 2026 · checked against the official CNCF exam blueprint

This KCNA practice question is part of Courseiva's free CNCF certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the KCNA exam.