Skip to content

Platform Observability, Security, and Conformance Questions

Practice questions for Platform Observability, Security, and Conformance topic in Certified Cloud Native Platform Engineering Associate. 40 questions covering this domain.

40 questions10 easy21 medium9 hard
Q1
hard

A CI pipeline pulls a base container image using the mutable `latest` tag. A known vulnerability was patched in a newer image build but the pipeline c...

Q2
medium

A microservices application experiences intermittent latency spikes. A platform engineer wants to identify which specific service call in the request ...

Q3
medium

A platform team wants to ensure a compromised application Pod cannot read Secrets from other namespaces via the Kubernetes API server. Which two contr...

Q4
medium

A platform team wants traffic between microservices inside a Kubernetes cluster to be encrypted in transit and services to authenticate each other's i...

Q5
medium

A platform team wants to enforce that all Kubernetes workloads define resource requests and limits before being admitted to the cluster. Which tool ca...

Q6
medium

A platform team wants to detect secrets accidentally committed to a Git repository before they are pushed to the remote server. Which practice most di...

Q7
easy

A platform engineer wants to prevent Pods from running as root across an entire Kubernetes namespace. Which Kubernetes mechanism is best suited to enf...

Q8
medium

A platform team has deployed OpenTelemetry Collector and Jaeger. Developers report that trace data from their services does not appear in Jaeger despi...

Q9
easy

Which three signals are considered the three pillars of observability in cloud native systems?

Q10
hard

A platform team needs to enforce that every Deployment in the cluster must have a `team` label before it can be created. The policy must be declarativ...

Q11
medium

A platform engineer needs to ensure that Kubernetes Secret objects stored in etcd are not readable as plaintext if the etcd data files are accessed di...

Q12
medium

A platform team wants to block container images containing critical vulnerabilities from being deployed to production. At which stage in the CI/CD pip...

Q13
easy

In platform observability and reliability engineering, what is a Service Level Objective (SLO)?

Q14
hard

A platform team applies the Kubernetes restricted Pod Security Standard to a production namespace. A developer's Deployment that worked previously now...

Q15
medium

A platform team wants to ensure that only the frontend service Pod can communicate with the backend API Pod, and no other Pods in the cluster can reac...

Q16
hard

A platform engineer wants to detect when a container running in Kubernetes executes an interactive shell command such as `bash` or `sh` after Pod star...

Q17
hard

A platform team wants to audit the exact set of open-source libraries included in each production container image for compliance and vulnerability man...

Q18
easy

Which CNCF project provides a vendor-neutral set of APIs, SDKs, and a Collector component for generating, processing, and exporting telemetry data inc...

Q19
medium

A platform team has deployed Prometheus for metrics collection and wants to create dashboards showing request rates, error rates, and latency for each...

Q20
medium

A platform team is adding observability to a new microservice and wants Prometheus to scrape its metrics. What must the service provide, and how must ...

Sign in to see all 40 questions

Create a free account to browse all questions — completely free during our launch phase.