Exam Bundle

The production rollout starts with image pulls succeeding and no missing-credential failure during the first Pod startup. That observed result would support another specific correction: Add pre-deployment checks for registry access, required Secrets and namespace permissions before promotion. The other scenario concerns: A software team promotes manifests without checking whether container registry credentials exist in the target environment. The current Timberline Foods problem is: A release team pushes untested images directly into production and calls the sequence continuous integration. The evidence required here is: The pipeline rejects a failing commit before publishing or deploying an unverified application image.

A simulated failed rollout restores a known good revision and its exact image digest is still retrievable. That observed result would support another specific correction: Retain suitable Deployment revision history and keep verified release images available for controlled rollback. The other scenario concerns: A delivery team deletes older ReplicaSets after every rollout and later discovers there is no supported revision to undo. The current Timberline Foods problem is: A release team pushes untested images directly into production and calls the sequence continuous integration. The evidence required here is: The pipeline rejects a failing commit before publishing or deploying an unverified application image.

A load test automatically scales within defined limits and returns toward baseline when demand subsides. That observed result would support another specific correction: Use the HPA's supported desired behavior and define min/max replicas rather than continually overriding controller intent. The other scenario concerns: An engineer scales an application manually during every traffic spike while an approved HPA already controls its replica target. The current Timberline Foods problem is: A release team pushes untested images directly into production and calls the sequence continuous integration. The evidence required here is: The pipeline rejects a failing commit before publishing or deploying an unverified application image.

Validate the template rendering and configuration values before applying the resulting Kubernetes resources. That choice addresses a different foundational issue: A release build fails because a Helm values file references a nonexistent key and the team deploys unrendered templates anyway. The issue at Juniper Media is instead: An organization merges code frequently but deploys new versions by manually copying files into running containers. It does not establish the required correction; the decisive verification would be: The release can be reproduced from version-controlled inputs and the target Deployment reports its new image version.

Publish immutable versioned image references and retain release metadata linking a commit to its deployed digest. That choice addresses a different foundational issue: A team creates a Deployment with an identical application tag for every release and cannot correlate an incident to code. The issue at Juniper Media is instead: An organization merges code frequently but deploys new versions by manually copying files into running containers. It does not establish the required correction; the decisive verification would be: The release can be reproduced from version-controlled inputs and the target Deployment reports its new image version.

Retain suitable Deployment revision history and keep verified release images available for controlled rollback. That choice addresses a different foundational issue: A delivery team deletes older ReplicaSets after every rollout and later discovers there is no supported revision to undo. The issue at Juniper Media is instead: An organization merges code frequently but deploys new versions by manually copying files into running containers. It does not establish the required correction; the decisive verification would be: The release can be reproduced from version-controlled inputs and the target Deployment reports its new image version.

The green version passes health and acceptance tests before clients are directed to it, with a working rollback path. That observed result would support another specific correction: Run and validate a separate green version before atomically switching the intended traffic selection. The other scenario concerns: An application requires blue-green deployment but the team updates the shared Service selector before testing the green environment. The current Juniper Media problem is: An organization merges code frequently but deploys new versions by manually copying files into running containers. The evidence required here is: The release can be reproduced from version-controlled inputs and the target Deployment reports its new image version.

The pipeline rejects a failing commit before publishing or deploying an unverified application image. That observed result would support another specific correction: Establish automated build and test validation in CI, with a separate approved continuous delivery or deployment stage. The other scenario concerns: A release team pushes untested images directly into production and calls the sequence continuous integration. The current Juniper Media problem is: An organization merges code frequently but deploys new versions by manually copying files into running containers. The evidence required here is: The release can be reproduced from version-controlled inputs and the target Deployment reports its new image version.

The production rollout starts with image pulls succeeding and no missing-credential failure during the first Pod startup. That observed result would support another specific correction: Add pre-deployment checks for registry access, required Secrets and namespace permissions before promotion. The other scenario concerns: A software team promotes manifests without checking whether container registry credentials exist in the target environment. The current Juniper Media problem is: An organization merges code frequently but deploys new versions by manually copying files into running containers. The evidence required here is: The release can be reproduced from version-controlled inputs and the target Deployment reports its new image version.

Describe Helm as a packaging and release tool that renders and manages Kubernetes resource definitions. That choice addresses a different foundational issue: A team believes Helm charts run containers by themselves and expects an installed chart to replace Kubernetes controllers. The issue at Meadowbrook Finance is instead: An organization merges code frequently but deploys new versions by manually copying files into running containers. It does not establish the required correction; the decisive verification would be: The release can be reproduced from version-controlled inputs and the target Deployment reports its new image version.

Use a reusable and versioned Helm chart or appropriate configuration template with explicit per-app values. That choice addresses a different foundational issue: A project copies the same long Kubernetes manifest into twenty application repositories and struggles with consistent upgrades. The issue at Meadowbrook Finance is instead: An organization merges code frequently but deploys new versions by manually copying files into running containers. It does not establish the required correction; the decisive verification would be: The release can be reproduced from version-controlled inputs and the target Deployment reports its new image version.

Explain that GitOps uses version-controlled desired state with controlled reconciliation and separate authorization boundaries. That choice addresses a different foundational issue: A platform team describes GitOps as granting every repository reader administrative kubectl access to the cluster. The issue at Meadowbrook Finance is instead: An organization merges code frequently but deploys new versions by manually copying files into running containers. It does not establish the required correction; the decisive verification would be: The release can be reproduced from version-controlled inputs and the target Deployment reports its new image version.

An installed chart creates ordinary Deployments and Services which the Kubernetes control plane subsequently reconciles. That observed result would support another specific correction: Describe Helm as a packaging and release tool that renders and manages Kubernetes resource definitions. The other scenario concerns: A team believes Helm charts run containers by themselves and expects an installed chart to replace Kubernetes controllers. The current Meadowbrook Finance problem is: An organization merges code frequently but deploys new versions by manually copying files into running containers. The evidence required here is: The release can be reproduced from version-controlled inputs and the target Deployment reports its new image version.

A load test automatically scales within defined limits and returns toward baseline when demand subsides. That observed result would support another specific correction: Use the HPA's supported desired behavior and define min/max replicas rather than continually overriding controller intent. The other scenario concerns: An engineer scales an application manually during every traffic spike while an approved HPA already controls its replica target. The current Meadowbrook Finance problem is: An organization merges code frequently but deploys new versions by manually copying files into running containers. The evidence required here is: The release can be reproduced from version-controlled inputs and the target Deployment reports its new image version.

A repository change follows review and audit controls while ordinary read access grants no direct cluster administrator privilege. That observed result would support another specific correction: Explain that GitOps uses version-controlled desired state with controlled reconciliation and separate authorization boundaries. The other scenario concerns: A platform team describes GitOps as granting every repository reader administrative kubectl access to the cluster. The current Meadowbrook Finance problem is: An organization merges code frequently but deploys new versions by manually copying files into running containers. The evidence required here is: The release can be reproduced from version-controlled inputs and the target Deployment reports its new image version.

Validate the template rendering and configuration values before applying the resulting Kubernetes resources. That choice addresses a different foundational issue: A release build fails because a Helm values file references a nonexistent key and the team deploys unrendered templates anyway. The issue at Eastshore Energy is instead: An operator applies a new Deployment manifest but removes a container health check that guarded the previous release. It does not establish the required correction; the decisive verification would be: The pipeline verifies that new Pods become ready before they receive normal production Service traffic.

Retain suitable Deployment revision history and keep verified release images available for controlled rollback. That choice addresses a different foundational issue: A delivery team deletes older ReplicaSets after every rollout and later discovers there is no supported revision to undo. The issue at Eastshore Energy is instead: An operator applies a new Deployment manifest but removes a container health check that guarded the previous release. It does not establish the required correction; the decisive verification would be: The pipeline verifies that new Pods become ready before they receive normal production Service traffic.

Move sensitive values to approved secret management and keep Helm or GitOps configuration free of live credentials. That choice addresses a different foundational issue: A release team stores database credentials in Helm values committed publicly so deployments can be copied across environments. The issue at Eastshore Energy is instead: An operator applies a new Deployment manifest but removes a container health check that guarded the previous release. It does not establish the required correction; the decisive verification would be: The pipeline verifies that new Pods become ready before they receive normal production Service traffic.

Multiple apps render consistent manifests from one maintained package while retaining their approved environment settings. That observed result would support another specific correction: Use a reusable and versioned Helm chart or appropriate configuration template with explicit per-app values. The other scenario concerns: A project copies the same long Kubernetes manifest into twenty application repositories and struggles with consistent upgrades. The current Eastshore Energy problem is: An operator applies a new Deployment manifest but removes a container health check that guarded the previous release. The evidence required here is: The pipeline verifies that new Pods become ready before they receive normal production Service traffic.

The HPA displays valid current metrics and adjusts replicas after an authorized load change. That observed result would support another specific correction: Supply supported resource or custom metrics with appropriate requests and a working metrics adapter for autoscaling. The other scenario concerns: A team tries to use an HPA without any usable metrics source and assumes it will infer load from container image size. The current Eastshore Energy problem is: An operator applies a new Deployment manifest but removes a container health check that guarded the previous release. The evidence required here is: The pipeline verifies that new Pods become ready before they receive normal production Service traffic.

A load test automatically scales within defined limits and returns toward baseline when demand subsides. That observed result would support another specific correction: Use the HPA's supported desired behavior and define min/max replicas rather than continually overriding controller intent. The other scenario concerns: An engineer scales an application manually during every traffic spike while an approved HPA already controls its replica target. The current Eastshore Energy problem is: An operator applies a new Deployment manifest but removes a container health check that guarded the previous release. The evidence required here is: The pipeline verifies that new Pods become ready before they receive normal production Service traffic.

Add pre-deployment checks for registry access, required Secrets and namespace permissions before promotion. That choice addresses a different foundational issue: A software team promotes manifests without checking whether container registry credentials exist in the target environment. The issue at Alpine Healthcare is instead: An operator applies a new Deployment manifest but removes a container health check that guarded the previous release. It does not establish the required correction; the decisive verification would be: The pipeline verifies that new Pods become ready before they receive normal production Service traffic.

Use a repeatable deployment pipeline that publishes a versioned image and updates declarative Kubernetes manifests. That choice addresses a different foundational issue: An organization merges code frequently but deploys new versions by manually copying files into running containers. The issue at Alpine Healthcare is instead: An operator applies a new Deployment manifest but removes a container health check that guarded the previous release. It does not establish the required correction; the decisive verification would be: The pipeline verifies that new Pods become ready before they receive normal production Service traffic.

Use declarative environment overlays or configuration values under version control with a reproducible promotion process. That choice addresses a different foundational issue: An application is configured in three environments through manual edits that leave different values undocumented. The issue at Alpine Healthcare is instead: An operator applies a new Deployment manifest but removes a container health check that guarded the previous release. It does not establish the required correction; the decisive verification would be: The pipeline verifies that new Pods become ready before they receive normal production Service traffic.

The green version passes health and acceptance tests before clients are directed to it, with a working rollback path. That observed result would support another specific correction: Run and validate a separate green version before atomically switching the intended traffic selection. The other scenario concerns: An application requires blue-green deployment but the team updates the shared Service selector before testing the green environment. The current Alpine Healthcare problem is: An operator applies a new Deployment manifest but removes a container health check that guarded the previous release. The evidence required here is: The pipeline verifies that new Pods become ready before they receive normal production Service traffic.

The HPA displays valid current metrics and adjusts replicas after an authorized load change. That observed result would support another specific correction: Supply supported resource or custom metrics with appropriate requests and a working metrics adapter for autoscaling. The other scenario concerns: A team tries to use an HPA without any usable metrics source and assumes it will infer load from container image size. The current Alpine Healthcare problem is: An operator applies a new Deployment manifest but removes a container health check that guarded the previous release. The evidence required here is: The pipeline verifies that new Pods become ready before they receive normal production Service traffic.

The output manifests contain the environment-specific patch and the normal Kubernetes controllers run the final workload. That observed result would support another specific correction: Explain that Kustomize customizes declarative manifests before API submission, rather than acting as a cluster runtime. The other scenario concerns: A team changes a Kustomize overlay expecting it to create a runtime configuration service on a worker. The current Alpine Healthcare problem is: An operator applies a new Deployment manifest but removes a container health check that guarded the previous release. The evidence required here is: The pipeline verifies that new Pods become ready before they receive normal production Service traffic.

Add pre-deployment checks for registry access, required Secrets and namespace permissions before promotion. That choice addresses a different foundational issue: A software team promotes manifests without checking whether container registry credentials exist in the target environment. The issue at Brookside Manufacturing is instead: A rolling update becomes unavailable because all old Pods are removed before any replacements pass readiness. It does not establish the required correction; the decisive verification would be: A representative rollout keeps the agreed minimum number of ready replicas available throughout the update.

Move sensitive values to approved secret management and keep Helm or GitOps configuration free of live credentials. That choice addresses a different foundational issue: A release team stores database credentials in Helm values committed publicly so deployments can be copied across environments. The issue at Brookside Manufacturing is instead: A rolling update becomes unavailable because all old Pods are removed before any replacements pass readiness. It does not establish the required correction; the decisive verification would be: A representative rollout keeps the agreed minimum number of ready replicas available throughout the update.

Include appropriate readiness and startup checks as part of a tested declarative release specification. That choice addresses a different foundational issue: An operator applies a new Deployment manifest but removes a container health check that guarded the previous release. The issue at Brookside Manufacturing is instead: A rolling update becomes unavailable because all old Pods are removed before any replacements pass readiness. It does not establish the required correction; the decisive verification would be: A representative rollout keeps the agreed minimum number of ready replicas available throughout the update.

The production rollout starts with image pulls succeeding and no missing-credential failure during the first Pod startup. That observed result would support another specific correction: Add pre-deployment checks for registry access, required Secrets and namespace permissions before promotion. The other scenario concerns: A software team promotes manifests without checking whether container registry credentials exist in the target environment. The current Brookside Manufacturing problem is: A rolling update becomes unavailable because all old Pods are removed before any replacements pass readiness. The evidence required here is: A representative rollout keeps the agreed minimum number of ready replicas available throughout the update.

An installed chart creates ordinary Deployments and Services which the Kubernetes control plane subsequently reconciles. That observed result would support another specific correction: Describe Helm as a packaging and release tool that renders and manages Kubernetes resource definitions. The other scenario concerns: A team believes Helm charts run containers by themselves and expects an installed chart to replace Kubernetes controllers. The current Brookside Manufacturing problem is: A rolling update becomes unavailable because all old Pods are removed before any replacements pass readiness. The evidence required here is: A representative rollout keeps the agreed minimum number of ready replicas available throughout the update.

The pipeline verifies that new Pods become ready before they receive normal production Service traffic. That observed result would support another specific correction: Include appropriate readiness and startup checks as part of a tested declarative release specification. The other scenario concerns: An operator applies a new Deployment manifest but removes a container health check that guarded the previous release. The current Brookside Manufacturing problem is: A rolling update becomes unavailable because all old Pods are removed before any replacements pass readiness. The evidence required here is: A representative rollout keeps the agreed minimum number of ready replicas available throughout the update.