Pass the Linux Foundation Kubernetes and Cloud Native CNPA Questions and answers with ExamsMirror

Declarative resource management is a core principle in Kubernetes and cloud native platforms. Option C is correct because declarative systems define the desired state of resources (e.g., YAML manifests for Deployments, Services, or ConfigMaps), and controllers reconcile the actual state to match the desired state. This provides consistency, automation, and resilience, while also allowing dynamic adjustments like scaling.

Option A (imperative management) requires step-by-step commands, which are error-prone and not scalable. Option B (manual tracking) adds overhead and risk of drift. Option D (static allocation) wastes resources and does not adapt to changing workloads.

Declarative management enables GitOps workflows, automated scaling, and consistent application of policies. This approach aligns with platform engineering principles by combining automation with governance, enabling efficiency and reliability at scale.

Kubernetes Network Policies are the feature that controls how Pods communicate with each other and external services. Option B is correct because Network Policies define rules for ingress (incoming) and egress (outgoing) traffic at the Pod level, ensuring fine-grained control over communication pathways within the cluster.

Option A (Pod Security Standards) defines policies around Pod security contexts (e.g., privilege escalation, root access) but does not control network traffic. Option C (Security Context) is specific to Pod or container-level permissions, not networking. Option D (RBAC) governs access to Kubernetes API resources, not Pod-to-Pod traffic.

Network Policies are essential for implementing a zero-trust model in Kubernetes, ensuring that only authorized services communicate. This enhances both security and compliance, especially in multi-tenant clusters.

Automation in DevOps practices is central to platform engineering because it enables faster, reliable, and repeatable deployments. Option D is correct: automation accelerates deployments, reduces bottlenecks, and enables continuous delivery and rapid iterations. By automating build, test, and deployment pipelines, teams can deliver new features quickly while maintaining high quality and compliance.

Option A is incorrect because automation does not reduce the need for communication—it complements collaboration by removing friction. Option B is unrealistic: some manual oversight may remain (e.g., in production approvals for sensitive workloads). Option C is not a primary benefit—while tools may be involved, the focus is on outcomes, not tool dependency.

By embedding automation, teams reduce toil, enforce consistency, and free developers to focus on value creation rather than repetitive tasks. This results in shorter lead times, higher deployment frequency, and overall improved developer experience, which aligns with DORA metrics.

The GitOps model is built on the principle that the desired state of infrastructure and applications must be stored in Git as the single source of truth. Option D is correct because Git provides versioning, immutability, and auditability, while reconciliation controllers (e.g., Argo CD or Flux) pull the desired state into the system continuously. This ensures that actual cluster state always matches the declared Git state.

Option A is partially correct but fails because GitOps eliminates manual push workflows—automation ensures changes are pulled and reconciled. Option B describes Kubernetes CRDs, which may be part of the system but do not embody GitOps on their own. Option C contradicts GitOps principles, which rely on pull-based reconciliation, not centralized push.

Storing desired state in Git provides full traceability, automated rollbacks, and continuous reconciliation, improving reliability and compliance. This makes GitOps a core practice for cloud native platform engineering.

Resource allocation varies between environments to balance cost, performance, and reliability. Option D is correct because development environments usually require fewer resources and are optimized for speed and cost efficiency, while production environments require stricter limits to ensure stability, scalability, and resilience under real user traffic.

Option A (identical settings) may simplify management but wastes resources and fails to account for different needs. Option B (maximizing usage in all environments) increases costs unnecessarily. Option C (strict parity) may be used in testing scenarios but is impractical as a universal rule.

By tailoring resource limits per environment, platforms ensure cost efficiency in dev/staging and robust performance in production. This practice is central to cloud native engineering, as it allows teams to innovate quickly while maintaining governance and operational excellence in production.