Online Access Free CNPA Practice Test

During a CI/CD pipeline review, the team discusses methods to prevent insecure code from being introduced into production. Which practice is most effective for this purpose?

• A.Using caching strategies to control secure content delivery.
• B.Implementing security gates at key stages of the pipeline.
• C.Performing load balancing controls to manage traffic during deployments.
• D.Conducting A/B testing to validate secure code changes.

In a GitOps approach, how should the desired state of a system be managed and integrated?

• A.By storing it so it is versioned and immutable, and pulled automatically into the system.
• B.As custom Kubernetes resources, stored and applied directly to the system.
• C.By using a centralized management tool to push changes immediately to all environments.
• D.By storing it in Git, and manually pushing updates through CI/CD pipelines.

A developer is struggling to access the necessary services on a cloud native platform due to complex Kubernetes configurations. What approach can best simplify their access to platform capabilities?

• A.Provide detailed documentation on Kubernetes configurations.
• B.Limit user access to only a few services.
• C.Implement a web portal that abstracts the Kubernetes complexities.
• D.Increase the number of required configurations to enhance security.

What is a key consideration during the setup of a Continuous Integration/Continuous Deployment (CI/CD) pipeline to ensure efficient and reliable software delivery?

• A.Implement automated testing at multiple points in the pipeline.
• B.Using a single development environment for all stages of the pipeline.
• C.Manually approve each build before deployment to maintain control over quality.
• D.Skip the packaging step to save time and reduce complexity.

Which metric measures a cloud native platform's impact on developer productivity and deployment speed?

• A.Monitor overall cloud infrastructure cost and resource consumption.
• B.Measure total cloud resource utilization across all development teams.
• C.Evaluate total security vulnerabilities detected during platform usage.
• D.Track average time from code commits to successful production deployment.