Linux Foundation Certified Cloud Native Platform Engineering Associate - CNPA Exam Practice Test

A. Deploy the feature to all users and prepare to roll it back manually if an issue is detected.

B. Use a blue/green deployment to direct internal users to one version and switch as needed.

C. Use feature flags to release the feature to selected users and control its availability through settings.

D. Use a canary deployment to gradually expose the feature to a small group of random users.

A. Service catalog with abstracted APIs and automated service registration.

B. Manual service dependencies configuration within application code.

C. Direct Kubernetes API access with detailed documentation.

D. Shared service connection strings and network configurations document.

A. CRDs automatically manage the scaling and failover of platform services without additional configuration.

B. CRDs enable platform teams to define custom APIs without modifying the Kubernetes API server code.

C. CRDs provide built-in support for multi-cloud deployments without additional tooling.

D. CRDs eliminate the need for Role-based access control (RBAC) configurations in Kubernetes clusters.

A. Prioritizing platform security over usability.

B. Keeping platform development separate from application teams.

C. Encouraging platform feedback loops from developers to improve usability.

D. Mandating that all teams must use the platform without exceptions

A. It accelerates deployments, enabling faster iterations and continuous delivery.

B. It creates dependencies on specific tools and platforms.

C. It reduces the need for communication between team members.

D. It eliminates the need for any manual intervention.

A. RBAC uses roles and role bindings to grant permissions to users for specific resources and actions.

B. RBAC is only applicable to Pods and does not extend to other Kubernetes resources.

C. RBAC allows users to have unrestricted roles and access to all resources in the cluster.

D. RBAC does not support namespace isolation and applies globally across the cluster.

A. Performing load balancing controls to manage traffic during deployments.

B. Conducting A/B testing to validate secure code changes.

C. Implementing security gates at key stages of the pipeline.

D. Using caching strategies to control secure content delivery.

A. Using a centralized logging system to monitor service interactions.

B. Limiting network access to services based on IP allowlisting.

C. Enabling encryption of communication between services using mTLS.

D. Automatically scaling services to handle increased traffic.

A. CI/CD pipelines are primarily for automating deployments; SBOM generation and security scanning are separate, manual processes performed after deployment.

B. SBOM generation and security scanning are particularly valuable for application software. While platform software may have different security considerations, these practices are highly beneficial within CI/CD pipelines for applications.

C. CI/CD pipelines are designed to accelerate the delivery of platform software, and adding SBOM generation and security scanning would slow down the process, so these activities are better suited for periodic audits conducted outside of the pipeline.

D. CI/CD pipelines should integrate SBOM generation and security scanning as automated steps within the build and test phases to ensure early detection of vulnerabilities and maintain a clear inventory of components.