CNPA Exam Questions and Answers | Exam-Dumps (Page: 2)

QUESTION: 9

In a Kubernetes environment, which component is responsible for watching the state of resources during the reconciliation process?

Kubernetes Scheduler
Kubernetes Dashboard
Kubernetes API Server
Kubernetes Controller

Answer(s): D

Explanation:

The Kubernetes reconciliation process ensures that the actual cluster state matches the desired state defined in manifests. The Kubernetes Controller (option D) is responsible for watching the state of resources through the API Server and taking action to reconcile differences. For example, the Deployment Controller ensures that the number of Pods matches the replica count specified, while the Node Controller monitors node health.

Option A (Scheduler) is incorrect because the Scheduler's role is to assign Pods to nodes based on constraints and availability, not ongoing reconciliation. Option B (Dashboard) is simply a UI for visualization and does not manage cluster state. Option C (API Server) exposes the Kubernetes API and serves as the communication hub, but it does not perform reconciliation logic itself.

Controllers embody the core Kubernetes design principle: continuous reconciliation between declared state and observed state. This makes them fundamental to declarative infrastructure and aligns with GitOps practices where controllers continuously enforce desired configurations from source control.

Reference:

-- CNCF Kubernetes Documentation

-- CNCF GitOps Principles

-- Cloud Native Platform Engineering Study Guide

Reveal Solution Next Question

QUESTION: 10

To simplify service consumption for development teams on a Kubernetes platform, which approach combines service discovery with an abstraction of underlying infrastructure details?

Manual service dependencies configuration within application code.
Shared service connection strings and network configurations document.
Direct Kubernetes API access with detailed documentation.
Service catalog with abstracted APIs and automated service registration.

Answer(s): D

Explanation:

Simplifying developer access to platform services is a central goal of internal developer platforms (IDPs). Option D is correct because a service catalog with abstracted APIs and automated registration provides a unified interface for developers to consume services without dealing with low-level infrastructure details. This approach combines service discovery with abstraction, offering golden paths and self-service capabilities.

Option A burdens developers with hardcoded dependencies, reducing flexibility and portability. Option B relies on manual documentation, which is error-prone and not dynamic. Option C increases cognitive load by requiring developers to interact directly with Kubernetes APIs, which goes against platform engineering's goal of reducing complexity.

A service catalog enables developers to provision databases, messaging queues, or APIs with minimal input, while the platform automates backend provisioning and wiring. It also improves consistency, compliance, and observability by embedding platform-wide policies into the service provisioning workflows. This results in a seamless developer experience that accelerates delivery while maintaining governance.

Reference:

-- CNCF Platforms Whitepaper

-- CNCF Platform Engineering Maturity Model

-- Cloud Native Platform Engineering Study Guide

Reveal Solution Next Question

QUESTION: 11

A team wants to deploy a new feature to production for internal users only and be able to instantly disable it if problems occur, without redeploying code.
Which strategy is most suitable?

Use a blue/green deployment to direct internal users to one version and switch as needed.
Use feature flags to release the feature to selected users and control its availability through settings.
Use a canary deployment to gradually expose the feature to a small group of random users.
Deploy the feature to all users and prepare to roll it back manually if an issue is detected.

Answer(s): B

Explanation:

Feature flags are the most effective way to control feature exposure to specific users, such as internal testers, while enabling fast rollback without redeployment. Option B is correct because feature flags allow teams to decouple deployment from release, giving precise runtime control over feature availability. This means that once the code is deployed, the team can toggle the feature on or off for different cohorts (e.g., internal users) dynamically.

Option A (blue/green deployment) controls traffic between two environments but does not provide user-level granularity. Option C (canary deployments) gradually expose changes but focus on random subsets of users rather than targeted groups such as internal employees. Option D requires redeployment or rollback, which introduces risk and slows down incident response.

Feature flags are widely recognized in platform engineering as a core continuous delivery practice that improves safety, accelerates experimentation, and enhances resilience by enabling immediate mitigation of issues.

Reference:

-- CNCF Platforms Whitepaper

-- Cloud Native Platform Engineering Study Guide

-- Continuous Delivery Foundation Guidance

Reveal Solution Next Question

QUESTION: 12

In the context of observability, which telemetry signal is primarily used to record events that occur within a system and are timestamped?

Logs
Alerts
Traces
Metrics

Answer(s): A

Explanation:

Logs are detailed, timestamped records of discrete events that occur within a system. They provide granular insight into what has happened, making them crucial for debugging, auditing, and incident investigations. Option A is correct because logs capture both normal and error events, often containing contextual information such as error codes, user IDs, or request payloads.

Option B (alerts) are secondary outputs generated from telemetry signals like logs or metrics and are not raw data themselves. Option C (traces) represent the flow of requests across distributed systems, showing relationships and latency between services but not arbitrary events. Option D (metrics) are numeric aggregates sampled over intervals (e.g., CPU usage, latency), not discrete, timestamped events.

Observability guidance in cloud native systems emphasizes the "three pillars" of telemetry: logs, metrics, and traces. Logs are indispensable for root cause analysis and compliance because they preserve historical event context.

Reference:

-- CNCF Observability Whitepaper

-- OpenTelemetry Documentation (aligned with CNCF)

-- Cloud Native Platform Engineering Study Guide

Reveal Solution Next Question

QUESTION: 13

In assessing the effectiveness of platform engineering initiatives, which DORA metric most directly correlates to the time it takes for code from its initial commit to be deployed into production?

Lead Time for Changes
Deployment Frequency
Mean Time to Recovery
Change Failure Rate

Answer(s): A

Explanation:

Lead Time for Changes is a DORA (DevOps Research and Assessment) metric that measures the time from code commit to successful deployment in production. Option A is correct because it directly reflects how quickly the platform enables developers to turn ideas into delivered software. Shorter lead times indicate an efficient delivery pipeline, streamlined workflows, and effective automation.

Option B (Deployment Frequency) measures how often code is deployed, not how long it takes to reach production. Option C (Mean Time to Recovery) measures operational resilience after failures. Option D (Change Failure Rate) indicates stability by measuring the percentage of deployments causing incidents.
While all DORA metrics are valuable, only Lead Time for Changes measures end- to-end speed of delivery.

In platform engineering, improving lead time often involves automating CI/CD pipelines, implementing GitOps, and reducing manual approvals. It is a core measurement of developer experience and platform efficiency.

Reference:

-- CNCF Platforms Whitepaper

-- Accelerate: State of DevOps Report (DORA Metrics)

-- Cloud Native Platform Engineering Study Guide

Reveal Solution Next Question

QUESTION: 14

In the context of observability for cloud native platforms, which of the following best describes the role of OpenTelemetry?

OpenTelemetry is primarily used for logging data only.
OpenTelemetry is a proprietary solution that limits its use to specific cloud providers.
OpenTelemetry provides a standardized way to collect and transmit observability data.
OpenTelemetry is solely focused on infrastructure monitoring.

Answer(s): C

Explanation:

OpenTelemetry is an open-source CNCF project that provides vendor-neutral, standardized APIs, SDKs, and agents for collecting and exporting observability data such as metrics, logs, and traces. Option C is correct because OpenTelemetry's purpose is to unify how telemetry data is generated, transmitted, and consumed, regardless of which backend (e.g., Prometheus, Jaeger, Elastic, commercial APM tools) is used.

Option A is incorrect because OpenTelemetry supports all three signal types (metrics, logs, traces), not just logs. Option B is incorrect because it is an open, community-driven standard and not tied to a single vendor or cloud provider. Option D is misleading because OpenTelemetry covers distributed applications, services, and infrastructure--far beyond just infrastructure monitoring.

OpenTelemetry reduces vendor lock-in and promotes interoperability, making it a cornerstone of cloud native observability strategies. Platform engineering teams rely on it to ensure consistent data collection, enabling better insights, faster debugging, and improved reliability of cloud native platforms.

Reference:

-- CNCF Observability Whitepaper

-- OpenTelemetry CNCF Project Documentation

-- Cloud Native Platform Engineering Study Guide

Reveal Solution Next Question

QUESTION: 15

A company is implementing a service mesh for secure service-to-service communication in their cloud native environment.
What is the primary benefit of using mutual TLS (mTLS) within this context?

Allows services to authenticate each other and secure data in transit.
Allows services to bypass security checks for better performance.
Enables logging of all service communications for audit purposes.
Simplifies the deployment of microservices by automatically scaling them.

Answer(s): A

Explanation:

Mutual TLS (mTLS) is a core feature of service meshes, such as Istio or Linkerd, that enhances security in cloud native environments by ensuring that both communicating services authenticate each other and that the communication channel is encrypted. Option A is correct because mTLS delivers two critical benefits: authentication (verifying the identity of both client and server services) and encryption (protecting data in transit from interception or tampering).

Option B is incorrect because mTLS does not bypass security--it enforces it. Option C is partly true in that service meshes often support observability and logging, but that is not the primary purpose of mTLS. Option D relates to scaling, which is outside the scope of mTLS.

In platform engineering, mTLS is a fundamental security mechanism that provides zero-trust networking between microservices, ensuring secure communication without requiring application- level changes. It strengthens compliance with security and data protection requirements, which are crucial in regulated industries.

Reference:

-- CNCF Service Mesh Whitepaper

-- CNCF Platforms Whitepaper

-- Cloud Native Platform Engineering Study Guide

Reveal Solution Next Question

QUESTION: 16

What is the primary purpose of using multiple environments (e.g., development, staging, production) in a cloud native platform?

Isolates different stages of application development and deployment
Reduces cloud costs by running applications in different locations.
Increases application performance by distributing traffic.
Ensures all applications use the same infrastructure.

Answer(s): A

Explanation:

The primary reason for implementing multiple environments in cloud native platforms is to isolate the different phases of the software development lifecycle. Option A is correct because environments such as development, staging, and production enable testing and validation at each stage without impacting end users. Development environments allow rapid iteration, staging environments simulate production for integration and performance testing, and production environments serve real users.

Option B (reducing costs) may be a side effect but is not the main purpose. Option C (distributing traffic) relates more to load balancing and high availability, not environment separation. Option D is the opposite of the goal--different environments often require tailored infrastructure to meet their distinct purposes.

Isolation through multiple environments is fundamental to reducing risk, supporting continuous delivery, and ensuring stability. This practice also allows for compliance checks, automated testing, and user acceptance validation before changes reach production.

Reference:

-- CNCF Platforms Whitepaper

-- Team Topologies & Platform Engineering Guidance

-- Cloud Native Platform Engineering Study Guide

Reveal Solution Next Question

Linux Foundation CNPA Exam (page: 2) Linux Foundation Certified Cloud Native Platform Engineering Associate Updated on: 12-Jan-2026

QUESTION: 9

Explanation:

Reference:

QUESTION: 10

Explanation:

Reference:

QUESTION: 11

Explanation:

Reference:

QUESTION: 12

Explanation:

Reference:

QUESTION: 13

Explanation:

Reference:

QUESTION: 14

Explanation:

Reference:

QUESTION: 15

Explanation:

Reference:

QUESTION: 16

Explanation:

Reference:

Linux Foundation CNPA Exam (page: 2)
Linux Foundation Certified Cloud Native Platform Engineering Associate
Updated on: 12-Jan-2026