Free Practice Linux Foundation Kyverno-Certified-Associate Exam Questions 2025

Stay ahead with 100% Free Kyverno Certified Associate (KCA) Kyverno-Certified-Associate Dumps Practice Questions

Page: 1 / 60

Total 299 Questions | Updated On: Jun 03, 2025

Add To Cart

Question 1

What is the role of CEL (Common Expression Language) expressions in Kyverno policies?

A : They specify the resource types to which the policy applies.

B : They provide a way to write conditional validation logic for resource specifications.

C : They define mutation rules for Kubernetes resources.

D : They handle the generation of new resources based on existing ones.

Answer: B

Question 2

Which of the following is a Role created by Kyverno in its namespace?

A : kyverno:security-controller

B : kyverno:storage-controller

C : kyverno:admission-controller

D : kyverno:network-controller

Answer: C

Question 3

Which integration strategy minimizes Kyverno's processing load by using PSA to enforce a baseline cluster-wide while Kyverno handles a more restrictive profile?

A : Use PSA to enforce the baseline profile cluster-wide and Kyverno’s podSecurity subrule to enforce the restricted profile.

B : Apply both PSA and Kyverno to enforce the same profile at the same scope.

C : Configure PSA to enforce baseline per namespace and Kyverno cluster-wide.

D : Enforce the restricted profile with PSA cluster-wide and handle baseline with Kyverno.

Answer: A

Question 4

Under which condition does Kyverno skip the auto-generation of Pod controller rules?

A : When the policy rule includes operations like DELETE.

B : When the 'pod-policies.kyverno.io/autogen-controllers' annotation includes all Pod controllers.

C : When the policy rule's match or exclude blocks specify 'names', 'selector', or 'annotations'.

D : When the policy rule matches only Pods.

Answer: C

Question 5

How does setting the 'ownerReferences' field in a generated Kyverno resource affect its lifecycle?

A : It prevents the generated resource from being modified by any other controllers.

B : It assigns a new owner to the generated resource, independent of the source resource.

C : It ensures that the generated resource has elevated permissions in the cluster.

D : It links the generated resource to the source resource, ensuring it is deleted when the source is deleted.

Answer: D

Page: 1 / 60

Total 299 Questions | Updated On: Jun 03, 2025

Add To Cart