Updated Dec-2025 Exam Engine for CNPA Exam Free Demo & 365 Day Updates [Q29-Q49]

QUESTION 29
A platform team is implementing an API-driven approach to enable development teams to consume platform capabilities more effectively. Which of the following examples best illustrates this approach?

Providing a documented process for developers to submit feature requests for the platform.

Developing a dashboard that visualizes platform usage statistics without exposing any APIs.

Allowing developers to request and manage development environments on demand through an internal tool.

Implementing a CI/CD pipeline that automatically deploys updates to the platform based on developer requests.

QUESTION 30
In the context of Agile methodology, which principle aligns best with DevOps practices in platform engineering?

Customer involvement should be limited during the development process to avoid disruptions.

Teams should continuously gather feedback and iterate on their work to improve outcomes.

Teams should strictly adhere to initial project plans without making adjustments during development.

Development and operations teams should remain separate to maintain clear responsibilities.

QUESTION 31
Why is centralized configuration management important in a multi-cluster GitOps setup?

It requires all clusters to have the exact same configuration, including secrets and environment variables, to maintain uniformity.

It ensures consistent and auditable management of configurations and policies across clusters from a single Git repository or set of coordinated repositories.

It eliminates the need for automated deployment tools like Argo CD or Flux since configurations are already stored centrally.

It makes it impossible for different teams to customize configurations for specific clusters, reducing flexibility.

QUESTION 32
A team wants to deploy a new feature to production for internal users only and be able to instantly disable it if problems occur, without redeploying code. Which strategy is most suitable?

Use a blue/green deployment to direct internal users to one version and switch as needed.

Use feature flags to release the feature to selected users and control its availability through settings.

Use a canary deployment to gradually expose the feature to a small group of random users.

Deploy the feature to all users and prepare to roll it back manually if an issue is detected.

QUESTION 33
What is the primary purpose of using multiple environments (e.g., development, staging, production) in a cloud native platform?

Isolates different stages of application development and deployment

Reduces cloud costs by running applications in different locations.

Increases application performance by distributing traffic.

Ensures all applications use the same infrastructure.

QUESTION 34
In a GitOps workflow using Crossplane, how is infrastructure provisioned across multiple clusters?

By using CI/CD pipelines to execute imperative scripts that create cloud infrastructure outside of Kubernetes in any cloud provider

By defining infrastructure resources declaratively in Git, where Crossplane controllers reconcile and provision them automatically in target environments.

By provisioning infrastructure manually in cloud provider consoles and documenting the steps in Git for future reference.

By manually applying Crossplane manifests to each cluster using kubectl to provision resources as needed for the infrastructure.

QUESTION 35
In a Kubernetes environment, which component is responsible for watching the state of resources during the reconciliation process?

Kubernetes Scheduler

Kubernetes Dashboard

Kubernetes API Server

Kubernetes Controller

QUESTION 36
Which platform component enables one-click provisioning of sandbox environments, including both infrastructure and application code?

CI/CD pipeline

Service mesh

Service bus

Observability pipeline

QUESTION 37
What is the goal of automating processes in platform teams?

Reducing time spent on repetitive tasks.

Focusing on manual processes.

Increasing the number of tasks completed.

Ensuring high-quality coding standards.

QUESTION 38
In the context of OpenTelemetry, which of the following is considered one of the supported signals of observability?

User Interface

Networking

Traces

Databases

QUESTION 39
A development team is struggling to find and connect to various services within a cloud platform. What is the primary benefit of implementing an API-driven service catalog for this team?

It enables easier service discovery through a consistent interface.

It increases the time taken to provision services.

It allows the team to bypass security protocols.

It requires the development team to manage provisioning details themselves.

QUESTION 40
In a Kubernetes environment, what is the primary distinction between an Operator and a Helm chart?

Operators are only for deploying applications, while Helm charts manage application resources.

Helm charts use Custom Resource Definitions while Operators use static manifests.

Operators handle ongoing management of custom resources while Helm charts focus on packaging and deployment.

Both Operators and Helm charts are the same, just different names used in the community.

QUESTION 41
Why might a platform allow different resource limits for development and production environments?

Enforcing strict resource parity, ensuring development environments constantly mirror production exactly.

Aligning resource allocation with the specific purpose and constraints of each environment.

Encouraging developers to maximize resource usage in all environments for stress testing.

Simplifying platform management by using identical resource settings everywhere.

QUESTION 42
What is the primary advantage of using a declarative approach to Infrastructure as Code (IaC) over an imperative approach?

Declarative IaC focuses on the “what” rather than the “how,” simplifying the management of infrastructure.

Declarative IaC is less suitable for dynamic environments compared to imperative IaC.

Declarative IaC allows for more granular control over resource provisioning.

Declarative IaC requires more coding effort compared to imperative IaC.

QUESTION 43
A platform team wants to let developers provision cloud services like S3 buckets and databases using Kubernetes-native APIs, without exposing cloud-specific details. Which tool is best suited for this?

Cluster API

Crossplane

Helm

OpenTofu

QUESTION 44
During a platform engineering meeting, a team discusses the importance of automating deployment processes to enhance collaboration and efficiency. What is the primary benefit of implementing automation in DevOps practices within platform engineering?

It reduces the need for communication between team members.

It eliminates the need for any manual intervention.

It creates dependencies on specific tools and platforms.

It accelerates deployments, enabling faster iterations and continuous delivery.

QUESTION 45
How can an internal platform team effectively support data scientists in leveraging complex AI/ML tools and infrastructure?

Integrate AI/ML steps into standard developer CI/CD systems for maximum reuse

Implement strict resource quotas and isolation for AI/ML workloads for stability.

Offer workflows and easy access to specialized AI/ML tools, data, and compute.

Focus the portal on UI-driven execution of predefined AI/ML jobs via abstraction.

QUESTION 46
A developer is tasked with securing a Kubernetes cluster and needs to implement Role-Based Access Control (RBAC) to manage user permissions. Which of the following statements about RBAC in Kubernetes is correct?

RBAC does not support namespace isolation and applies globally across the cluster.

RBAC allows users to have unrestricted roles and access to all resources in the cluster.

RBAC is only applicable to Pods and does not extend to other Kubernetes resources.

RBAC uses roles and role bindings to grant permissions to users for specific resources and actions.

QUESTION 47
A developer is struggling to access the necessary services on a cloud native platform due to complex Kubernetes configurations. What approach can best simplify their access to platform capabilities?

Increase the number of required configurations to enhance security.

Implement a web portal that abstracts the Kubernetes complexities.

Limit user access to only a few services.

Provide detailed documentation on Kubernetes configurations.

QUESTION 48
What does the latest tag usually represent in a container image registry?

The most recently built image unless otherwise specified.

A signed image that has passed all security validations.

The only image tag that can be deployed to production systems.

A system-generated version number based on Git history.

QUESTION 49
In what way does an internal platform impact developers’ cognitive load?

It has no impact on the mental effort required from developers, ensuring their cognitive load remains unchanged.

It reduces cognitive load by hiding complex infrastructure details and providing simple interfaces.