Skip to main content
ITPrepCerts
Login
Exams Free Samples About Contact
Login Create an account

CNPA Certified Cloud Native Platform Engineering Associate

  • Linux Foundation
  • 5 free sample questions

About this exam

CNPA is the Linux Foundation exam Certified Cloud Native Platform Engineering Associate. Paid practice material for this exam is not available yet, but you can try its free sample questions.

Exam code
CNPA
Vendor
Linux Foundation
Practice questions
Not available yet
Free sample questions
5
Question bank last updated
Not available yet

Try 2 sample questions

Taken from the free sample set for CNPA.

Question 1

In a GitOps workflow using Crossplane, how is infrastructure provisioned across multiple clusters?

  1. Option A:

    By using CI/CD pipelines to execute imperative scripts that create cloud infrastructure outside of Kubernetes in any cloud provider

  2. Option B:

    By defining infrastructure resources declaratively in Git, where Crossplane controllers reconcile and provision them automatically in target environments.

  3. Option C:

    By provisioning infrastructure manually in cloud provider consoles and documenting the steps in Git for future reference.

  4. Option D:

    By manually applying Crossplane manifests to each cluster using kubectl to provision resources as needed for the infrastructure.

Show answer and explanation

Correct answer: B

Crossplane integrates tightly with GitOps workflows by extending Kubernetes with infrastructure APIs. Option B is correct because infrastructure resources (databases, networks, S3 buckets, etc.) are defined declaratively in Git repositories. Git becomes the single source of truth, while Crossplane controllers automatically reconcile the desired state into real infrastructure across supported cloud providers.

Option A reflects imperative scripting, which contradicts GitOps principles. Option C (manual provisioning) lacks automation, governance, and repeatability. Option D involves manual application with kubectl, which bypasses GitOps reconciliation loops.

With Crossplane and GitOps, teams achieve consistent, reproducible, and auditable infrastructure provisioning at scale. This enables full alignment with cloud native platform engineering principles of declarative management, self-service, and extensibility.


--- CNCF Crossplane Documentation

--- CNCF GitOps Principles

--- Cloud Native Platform Engineering Study Guide

Question 2

In a cloud native environment, how do policy engines facilitate a unified approach for teams to consume platform services?

  1. Option A:

    Enforces strict compliance policies with security standards.

  2. Option B:

    Integrates with CI/CD pipelines to streamline service provisioning.

  3. Option C:

    Enforces service-level agreements (SLAs) across all teams.

  4. Option D:

    Provides centralized reusable policies to ensure security and compliance.

Show answer and explanation

Correct answer: D

Policy engines (such as Open Policy Agent -- OPA or Kyverno) play a critical role in enforcing governance, security, and compliance consistently across cloud native platforms. Option D is correct because policy engines provide centralized, reusable policies that can be applied across clusters, services, and environments. This ensures that developers consume platform services in a compliant and secure manner, without needing to manage these controls manually.

Option A is partially correct but too narrow, as policies extend beyond compliance to include operational, security, and cost-control measures. Option B is not the primary function of policy engines, though integration with CI/CD is possible. Option C is incorrect because SLAs are business agreements, not enforced by policy engines directly.

Policy engines enforce guardrails like image signing, RBAC rules, resource quotas, and network policies automatically, reducing cognitive load for developers while giving platform teams confidence in compliance. This supports the platform engineering principle of combining self-service with governance.


--- CNCF Platforms Whitepaper

--- CNCF Security TAG (OPA, Kyverno)

--- Cloud Native Platform Engineering Study Guide

See all 5 free sample questions