The Linux Foundation KCA 問題練習

Question No : 1
What is the primary purpose of a Kyverno policy?

• A.To deploy container images in a Kubernetes cluster.
• B.To define, validate, and enforce rules for Kubernetes resources.
• C.To monitor node health in a Kubernetes cluster.
• D.To manage Kubernetes role-based access control (RBAC).

答えを確認する

正解:

Question No : 2
What is the purpose of the validationFailureAction field in a Kyverno policy?

• A.To specify whether validation rules should log warnings or enforce rejections.
• B.To define the level of logs generated during policy execution.
• C.To set resource exclusion rules.
• D.To disable background scanning.

答えを確認する

正解:

Question No : 3
What is required for a cleanup policy to execute?

• A.A trigger condition and a matching rule.
• B.A Helm chart deployment.
• C.ValidationFailureAction set to Block.
• D.Autogen enabled in the policy.

答えを確認する

正解:

Question No : 4
What does the kyverno jp command do?

• A.Displays JSON patches for Kubernetes resources.
• B.Manages policy exceptions.
• C.Tests Helm-based configurations.
• D.Outputs log details of policy enforcement.

答えを確認する

正解:

Question No : 5
How does Kyverno retrieve dynamic data for policies?

• A.Through API server queries.
• B.By using external scripts.
• C.Via Kubernetes ConfigMaps.
• D.Using third-party plugins.

答えを確認する

正解:

Question No : 6
How does Kyverno select resources for policy application?

• A.By matching resource names only.
• B.By using the match and exclude fields in a policy.
• C.By relying on Helm configurations.
• D.By scanning resource labels only.

答えを確認する

正解:

Question No : 7
Which Kyverno policy field allows you to define external data sources?

• A.validate.context
• B.match.resources
• C.policy.metadata
• D.context

答えを確認する

正解:

Question No : 8
What is the primary function of a Kyverno validation rule?

• A.Enforcing resource creation policies.
• B.Generating resource templates.
• C.Modifying resource manifests dynamically.
• D.Applying updates to Helm charts.

答えを確認する

正解:

Question No : 9
What is the root key used in a Kyverno policy to define its rules?

• A.policyRules
• B.spec.rules
• C.policy.yaml
• D.rules

答えを確認する

正解:

Question No : 10
How can Kyverno be configured for high availability?

• A.By deploying multiple replicas of the Kyverno pod.
• B.By using a dedicated node for Kyverno.
• C.By enabling network policies for Kyverno.
• D.By setting the high-availability flag during Helm installation.

答えを確認する

正解:

Question No : 11
Which command retrieves information about an OCI image used in a Kubernetes cluster?

• A.kubectl describe pod
• B.kubectl get images
• C.kubectl get pods -o yaml
• D.kubectl describe image

答えを確認する

正解:

Question No : 12
Which preconditions can be used to control Kyverno rule execution? (Choose two)

• A.Matching specific resource labels.
• B.Ensuring API server availability.
• C.Validating the presence of resource kinds.
• D.Setting dynamic time constraints.

答えを確認する

正解:

Question No : 13
What are valid use cases for defining PolicyExceptions? (Choose two)

• A.Temporarily excluding critical workloads from validation policies.
• B.Adding new validation rules to existing policies.
• C.Resolving issues caused by improperly configured policies.
• D.Automatically generating new policies.

答えを確認する

正解:

Question No : 14
Which of the following commands applies a Kyverno policy to all matching resources in a Kubernetes cluster?

• A.kubectl apply -k
• B.kyverno test
• C.kyverno apply
• D.kubectl create policy

答えを確認する

正解:

Question No : 15
What does the Kyverno metric kyverno_policy_execution_total measure?

• A.The total number of failed resource validations.
• B.The number of times policies have been executed.
• C.The total number of policies currently active.
• D.The number of active Kyverno controllers in the cluster.

答えを確認する

正解: