Online Access Free CNPA Exam Questions

A platform engineering team is building an Internal Developer Platform (IDP). Which of the following enables application teams to manage infrastructure resources independently, without requiring direct platform team support?

• A.Centralized logging and monitoring interfaces.
• B.Self-service resource provisioning APIs.
• C.Manual infrastructure deployment services.
• D.A comprehensive platform knowledge center.

A company is implementing a service mesh for secure service-to-service communication in their cloud native environment. What is the primary benefit of using mutual TLS (mTLS) within this context?

• A.Simplifies the deployment of microservices by automatically scaling them.
• B.Allows services to authenticate each other and secure data in transit.
• C.Allows services to bypass security checks for better performance.
• D.Enables logging of all service communications for audit purposes.

As a Cloud Native Platform Associate, you need to implement an observability strategy for your Kubernetes clusters. Which of the following tools is most commonly used for collecting and monitoring metrics in cloud native environments?

• A.Grafana
• B.OpenTelemetry
• C.ELK Stack
• D.Prometheus

A platform team is deciding whether to invest engineering time into automating cluster autoscaling. Which of the following best justifies making this automation a priority?

• A.Cluster autoscaling is a repetitive task that increases toil when done manually.
• B.Most engineers prefer doing upgrade tasks manually and prefer to review each one.
• C.Automation tools are better than manual processes, regardless of context.
• D.Manual upgrade tasks help platform teams stay familiar with system internals.

Which approach is an effective method for securing secrets in CI/CD pipelines?

• A.Encoding secrets in the source code using base64.
• B.Storing secrets as plain-text environment variables managed through config files.
• C.Storing secrets and encrypting them in a secrets manager.
• D.Storing secrets in configuration files with restricted access.