Linux-Foundation CNPA Practice Exam Questions

Linux-Foundation CNPA Sample Question Answers

Question # 1

In designing a cloud native platform, which architectural feature is essential for allowing theintegration of new capabilities like self-service delivery and observability without specialistintervention? 

A. Monolithic architecture with no APIs.  
B. Centralized integration through specialist API gateways.  
C. Extensible architecture with modular components.  
D. Static architecture with rigid components.  

Show Answer

Question # 2

A platform engineering team is building an Internal Developer Platform (IDP). Which of the following enables application teams to manage infrastructure resources independently, without requiring direct platform team support? 

A. Manual infrastructure deployment services.
B. A comprehensive platform knowledge center.
C. Centralized logging and monitoring interfaces.
D. Self-service resource provisioning APIs.

Show Answer

Question # 3

A platform team is deciding whether to invest engineering time into automating cluster autoscaling.Which of the following best justifies making this automation a priority? 

A. Cluster autoscaling is a repetitive task that increases toil when done manually.  
B. Manual upgrade tasks help platform teams stay familiar with system internals.  
C. Most engineers prefer doing upgrade tasks manually and prefer to review each one.  
D. Automation tools are better than manual processes, regardless of context.  

Show Answer

Question # 4

What is a key consideration during the setup of a Continuous Integration/Continuous Deployment(CI/CD) pipeline to ensure efficient and reliable software delivery? 

A. Using a single development environment for all stages of the pipeline.  
B. Implement automated testing at multiple points in the pipeline.  
C. Skip the packaging step to save time and reduce complexity.  
D. Manually approve each build before deployment to maintain control over quality.  

Show Answer

Question # 5

During a CI/CD pipeline review, the team discusses methods to prevent insecure code from being introduced into production. Which practice is most effective for this purpose?

A. Implementing security gates at key stages of the pipeline. 
B. Performing load balancing controls to manage traffic during deployments
C. Conducting A/B testing to validate secure code changes. 
D. Using caching strategies to control secure content delivery.

Show Answer

Question # 6

In the context of Istio, what is the purpose of PeerAuthentication?  

A. Managing network policies for ingress traffic  
B. Defining how traffic is routed between services  
C. Securing service-to-service communication  
D. Monitoring and logging service communication  

Show Answer

Question # 7

Which of the following best represents an effective golden path implementation in platform engineering?

A. A central documentation repository listing available database services with their configuration parameters.
B. A monitoring dashboard system that displays the operational health metrics and alerting thresholds for all platform services. 
C. A templated workflow that guides developers through deploying a complete microservice with integrated testing and monitoring. 
D. An API service catalog providing comprehensive details about available infrastructure components and their consumption patterns

Show Answer

Question # 8

If you update a Deployment's replica count from 3 to 5, how does the reconciliation loop respond? 

A. It will delete the Deployment and require you to re-create it with 5 replicas.
B. It will create new Pods to meet the new replica count of 5.  
C. It will wait for an admin to manually add two more Pod definitions.  
D. It will restart the existing Pods before adding any new Pods.  

Show Answer

Question # 9

During a CI/CD pipeline setup, at which stage should the Software Bill of Materials (SBOM) begenerated to provide most valuable insights into dependencies? 

A. During testing.  
B. Before committing code.  
C. During the build process.  
D. After deployment.  

Show Answer

Question # 10

In a scenario where an Internal Developer Platform (IDP) is being used to enable developers to selfservice provision products and capabilities such as Namespace-as-a-Service, which answer best describes who is responsible for resolving application-related incidents? 

A. A separate team is created which includes people previously from the platform and application teams to solve all problems for the organization.  
B. Platform teams delegate appropriate permissions to the application teams to allow them to selfmanage and resolve any underlying infrastructure and application-related problems. 
C. Platform teams are responsible for investigating and resolving underlying infrastructure problems whilst application teams are responsible for investigating and resolving application-related problems. 
D. Platform teams are responsible for investigating and resolving all problems related to the platform, including application ones, before the app teams notice.  

Show Answer