CNPA 試験問題を無料オンラインアクセス

Which platform component enables one-click provisioning of sandbox environments, including both infrastructure and application code?

• A.Service mesh
• B.Observability pipeline
• C.CI/CD pipeline
• D.Service bus

A developer is struggling to access the necessary services on a cloud native platform due to complex Kubernetes configurations. What approach can best simplify their access to platform capabilities?

• A.Implement a web portal that abstracts the Kubernetes complexities.
• B.Increase the number of required configurations to enhance security.
• C.Provide detailed documentation on Kubernetes configurations.
• D.Limit user access to only a few services.

In a GitOps approach, how should the desired state of a system be managed and integrated?

• A.By storing it in Git, and manually pushing updates through CI/CD pipelines.
• B.By using a centralized management tool to push changes immediately to all environments.
• C.By storing it so it is versioned and immutable, and pulled automatically into the system.
• D.As custom Kubernetes resources, stored and applied directly to the system.

For a cloud native platform handling sensitive customer data, which approach ensures compliance with data privacy regulations like GDPR and PCI DSS within a Kubernetes environment?

• A.Implementing Kubernetes Role-based access control (RBAC) with basic network policies and periodic manual audits.
• B.Deploying a policy engine like Open Policy Agent (OPA) with real-time data masking and audit logging.
• C.Relying on default cloud provider IAM policies with minimal Kubernetes customizations.
• D.Utilizing standard Kubernetes Secrets with encrypted storage and manual access reviews.

In the context of platform engineering and the effective delivery of platform software, which of the following statements describes the role of CI/CD pipelines in relation to Software Bill of Materials (SBOM) and security scanning?

• A.CI/CD pipelines are primarily for automating deployments; SBOM generation and security scanning are separate, manual processes performed after deployment.
• B.SBOM generation and security scanning are particularly valuable for application software. While platform software may have different security considerations, these practices are highly beneficial within CI/CD pipelines for applications.
• C.CI/CD pipelines are designed to accelerate the delivery of platform software, and adding SBOM generation and security scanning would slow down the process, so these activities are better suited for periodic audits conducted outside of the pipeline.
• D.CI/CD pipelines should integrate SBOM generation and security scanning as automated steps within the build and test phases to ensure early detection of vulnerabilities and maintain a clear inventory of components.