100% Free Kyverno-Certified-Associate Practice Exam Questions and Answers

Stay Ahead with Latest Kyverno-Certified-Associate Clouds and Containers Practice Test Questions 2026

Page: 1 / 60

Total 299 Questions | Updated On: Sep 23, 2026

Add To Cart

Question 1

A Kubernetes administrator creates a Kyverno ClusterPolicy with the following configuration: - failureAction is set to Audit by default. - failureActionOverrides is defined to enforce policies in the 'production' namespace and audit in the 'development' namespace. What will be the failure action in a namespace named 'staging'?

A : Default to failureAction field

B : Enforce

C : Allow

D : Audit

Answer: A

Question 2

In a Kyverno policy, how can you uniquely identify the 'NetworkPolicy' resource from the 'antrea.io' API group and version 'v1alpha1' to avoid naming conflicts?

A : io.antrea/v1alpha1/NetworkPolicy

B : v1alpha1/antrea.io/NetworkPolicy

C : antrea.io/v1alpha1/NetworkPolicy

D : NetworkPolicy.antrea.io/v1alpha1

Answer: C

Question 3

What is the function of setting 'synchronize: true' in a Kyverno generate rule?

A : It allows the generated resource to be periodically synced with an external data source.

B : It ensures that any changes to the source resource will automatically update the generated resource.

C : It enables bidirectional synchronization between source and destination resources.

D : It forces the generated resource to remain read-only.

Answer: B

Question 4

What is the behavior of Kyverno when a deny rule with multiple conditions uses an 'any' block and one of the conditions evaluates to true?

A : Kyverno ignores the true condition and checks if all other conditions are also true.

B : Kyverno logs the violation but allows the resource to be created.

C : Kyverno stops evaluating further conditions and denies the resource immediately.

D : Kyverno continues evaluating the remaining conditions to collect all violations.

Answer: C

Question 5

What is the behavior of Kyverno when a deny rule with multiple conditions uses an 'any' block and one of the conditions evaluates to true?

A : Kyverno ignores the true condition and checks if all other conditions are also true.

B : Kyverno logs the violation but allows the resource to be created.

C : Kyverno stops evaluating further conditions and denies the resource immediately.

D : Kyverno continues evaluating the remaining conditions to collect all violations.

Answer: C

Page: 1 / 60

Total 299 Questions | Updated On: Sep 23, 2026

Add To Cart