KCNA Cloud Native Application Delivery Practice Question
In Flux CD, which component is responsible for reconciling the cluster state with the source of truth defined in a Git repository?
⚠ Common exam trap
KCNA often tests the distinction between Flux controllers, and candidates may confuse the Source controller (which fetches artifacts) with the Kustomize controller (which applies them), leading to incorrect answers.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Kustomize controller
The Kustomize controller in Flux CD is responsible for reconciling the cluster state with the desired state defined in a Git repository. It continuously monitors Kustomization custom resources, fetches the referenced source artifact (e.g., from a GitRepository), builds the manifests using Kustomize, and applies them to the cluster. This controller ensures that the actual state matches the declared state, making it the core reconciler for GitOps workflows in Flux.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Kustomize controller
Why this is correct
The Kustomize controller continuously reconciles cluster state against Kustomization manifests sourced from Git, applying declared resources and pruning drift. It satisfies the stem's requirement for the component that pulls the source of truth from Git and enforces it, rather than merely building manifests or serving artefacts.
- ✗
Source controller
Why it's wrong here
The source controller only fetches and stores artefacts from Git, OCI and bucket repositories; it does not apply manifests to the cluster. It is tempting because it owns the Git connection, and would be correct when configuring repository credentials, polling intervals or artefact revision tracking.
- ✗
Helm controller
Why it's wrong here
The Helm controller reconciles HelmRelease objects into chart releases; it consumes artefacts already fetched by the source controller rather than reading Git directly. It is tempting because it drives cluster state changes, and would be correct when managing Helm chart deployments declaratively.
- ✗
Notification controller
Why it's wrong here
The notification controller dispatches alerts about Flux events to external services such as Slack or webhooks; it never reads Git or applies manifests. It is tempting because it reports reconciliation outcomes, and would be correct when configuring event-driven alerting for failed deployments.
Go deeper
Related to this question
About these practice questions
One of 930 original KCNA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official CNCF exam blueprint
This KCNA practice question is part of Courseiva's free CNCF certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the KCNA exam.