100% Free Kyverno-Certified-Associate Practice Exam Questions and Answers

Stay Ahead with Latest Kyverno-Certified-Associate Clouds and Containers Practice Test Questions 2026

Page: 1 / 60

Total 299 Questions | Updated On: Sep 23, 2026

Add To Cart

Question 1

In a Kyverno policy definition, how can you reference the 'readinessProbe.tcpSocket.port' field three levels up from the current position?

A : $(./../../../readinessProbe/tcpSocket/port)

B :

C : {{request.object.spec.containers.readinessProbe.tcpSocket.port}}

D : ${./../../../readinessProbe/tcpSocket/port}

Answer: A

Question 2

In Kyverno, how do deny rules differ from pattern-based validation rules?

A : Deny rules are less expressive and cannot use multiple conditions, unlike pattern-based rules.

B : Deny rules block resources when conditions are met, whereas pattern-based rules allow resources when patterns match.

C : Deny rules are only applicable to network policies, while pattern-based rules can be used for any resource.

D : Deny rules allow resources if the condition is true, while pattern-based rules block them.

Answer: B

Question 3

How does setting the 'ownerReferences' field in a generated Kyverno resource affect its lifecycle?

A : It prevents the generated resource from being modified by any other controllers.

B : It assigns a new owner to the generated resource, independent of the source resource.

C : It ensures that the generated resource has elevated permissions in the cluster.

D : It links the generated resource to the source resource, ensuring it is deleted when the source is deleted.

Answer: D

Question 4

What is the role of CEL (Common Expression Language) expressions in Kyverno policies?

A : They specify the resource types to which the policy applies.

B : They provide a way to write conditional validation logic for resource specifications.

C : They define mutation rules for Kubernetes resources.

D : They handle the generation of new resources based on existing ones.

Answer: B

Question 5

What was a major breaking change introduced in Kyverno version 1.13?

A : Removal of wildcard view permissions for Kyverno controllers.

B : Introduction of a new Kyverno CLI tool for policy management.

C : Addition of new policy types for network management.

D : Deprecation of Helm as a supported installation method.

Answer: A

Page: 1 / 60

Total 299 Questions | Updated On: Sep 23, 2026

Add To Cart