Free Preparation Discussions
MENU
Linux Foundation CNPA Exam Questions
- Topic 1: Platform Engineering Core Fundamentals: This section of the exam measures the skills of Supplier Management Consultants and covers essential foundations such as declarative resource management, DevOps practices, application environments, platform architecture, and the core goals of platform engineering. It also includes continuous integration fundamentals, delivery approaches, and GitOps principles.
- Topic 2: Platform Observability, Security, and Conformance: This part of the exam evaluates Procurement Specialists on key aspects of observability and security. It includes working with traces, metrics, logs, and events while ensuring secure service communication. Policy engines, Kubernetes security essentials, and protection in CI/CD pipelines are also assessed here.
- Topic 3: Continuous Delivery & Platform Engineering: This section measures the skills of Supplier Management Consultants and focuses on continuous integration pipelines, the fundamentals of the CI/CD relationship, and GitOps basics. It also includes knowledge of workflows, incident response in platform engineering, and applying GitOps for application environments.
- Topic 4: Platform APIs and Provisioning Infrastructure: This part of the exam evaluates Procurement Specialists on the use of Kubernetes reconciliation loops, APIs for self-service platforms, and infrastructure provisioning with Kubernetes. It also assesses knowledge of the Kubernetes operator pattern for integration and platform scalability.
- Topic 5: IDPs and Developer Experience: This section of the exam measures the skills of Supplier Management Consultants and focuses on improving developer experience. It covers simplified access to platform capabilities, API-driven service catalogs, developer portals for platform adoption, and the role of AI/ML in platform automation.
- Topic 6: Measuring your Platform: This part of the exam assesses Procurement Specialists on how to measure platform efficiency and team productivity. It includes knowledge of applying DORA metrics for platform initiatives and monitoring outcomes to align with organizational goals.
Free Linux Foundation CNPA Exam Actual Questions
Note: Premium Questions for CNPA were last updated On Aug. 03, 2026 (see below)
How can an internal platform team effectively support data scientists in leveraging complex AI/ML tools and infrastructure?
The best way for platform teams to support data scientists is by enabling easy access to specialized AI/ML workflows, tools, and compute resources. Option C is correct because it empowers data scientists to experiment, train, and deploy models without worrying about the complexities of infrastructure setup. This aligns with platform engineering's principle of self-service with guardrails.
Option A (integrating into standard CI/CD) may help, but AI/ML workflows often require specialized tools like MLflow, Kubeflow, or TensorFlow pipelines. Option B (strict quotas) ensures stability but does not improve usability or productivity. Option D (UI-driven execution only) restricts flexibility and reduces the ability of data scientists to adapt workflows to evolving needs.
By offering AI/ML-specific workflows as golden paths within an Internal Developer Platform (IDP), platform teams improve developer experience for data scientists, accelerate innovation, and ensure compliance and governance.
--- CNCF Platforms Whitepaper
--- CNCF Platform Engineering Maturity Model
--- Cloud Native Platform Engineering Study Guide
Which IaC approach ensures Kubernetes infrastructure maintains its desired state automatically?
The declarative approach to Infrastructure as Code (IaC) is the foundation of Kubernetes and GitOps practices. Option A is correct because declarative IaC defines the desired state of the infrastructure (e.g., Kubernetes YAML manifests) and relies on controllers or reconciliation loops to ensure the actual state matches the declared one. This allows for automation, consistency, and drift correction without manual intervention.
Option B (imperative) requires explicit step-by-step instructions, which are not automatically enforced after execution. Option C (hybrid) can combine both methods but does not guarantee reconciliation. Option D (manual) is error-prone and eliminates the benefits of IaC entirely.
Declarative IaC reduces cognitive load, improves reproducibility, and ensures compliance through automated drift detection and reconciliation, which are essential in platform engineering for multi-cluster and multi-team environments.
--- CNCF GitOps Principles
--- Kubernetes Declarative Model
--- Cloud Native Platform Engineering Study Guide
For a cloud native platform handling sensitive customer data, which approach ensures compliance with data privacy regulations like GDPR and PCI DSS within a Kubernetes environment?
Compliance with regulations like GDPR and PCI DSS requires fine-grained control, auditing, and data protection. Option C is correct because deploying a policy engine like Open Policy Agent (OPA) enables dynamic enforcement of policies, real-time data masking, and comprehensive audit logging. This ensures sensitive data is protected while providing traceability and compliance reporting.
Option A is insufficient, as default IAM policies without Kubernetes-level governance do not provide the granularity required for compliance. Option B (Kubernetes Secrets) adds encryption but lacks auditability and runtime enforcement. Option D (RBAC and network policies) improves security posture but does not provide comprehensive compliance coverage or data privacy features like masking and logging.
OPA and similar tools integrate with Kubernetes admission control to enforce compliance policies consistently, providing the flexibility and auditability needed in regulated industries.
--- CNCF Security TAG Best Practices
--- CNCF Platforms Whitepaper
--- Cloud Native Platform Engineering Study Guide
In the context of OpenTelemetry, which of the following is considered one of the supported signals of observability?
OpenTelemetry is a CNCF project providing standardized APIs and SDKs for collecting observability data. Among its supported telemetry signals are metrics, logs, and traces. Option C is correct because traces are a core OpenTelemetry signal type that captures the journey of requests across distributed systems, making them vital for detecting latency, dependencies, and bottlenecks.
Option A (user interface), Option B (networking), and Option D (databases) represent system components or domains, not observability signals. While OpenTelemetry can instrument applications in these areas, it expresses data through its standard telemetry signals.
By supporting consistent collection of logs, metrics, and traces, OpenTelemetry enables observability pipelines to integrate seamlessly with different backends while avoiding vendor lock-in. Traces specifically provide visibility into distributed microservices, which is critical in cloud native environments.
--- CNCF Observability Whitepaper
--- OpenTelemetry CNCF Project Documentation
--- Cloud Native Platform Engineering Study Guide
In a scenario where an Internal Developer Platform (IDP) is being used to enable developers to self-service provision products and capabilities such as Namespace-as-a-Service, which answer best describes who is responsible for resolving application-related incidents?
Platform engineering clearly separates responsibilities between platform teams and application teams. Option C is correct because platform teams manage the platform and infrastructure layer, ensuring stability, compliance, and availability, while application teams own their applications, including troubleshooting application-specific issues.
Option A (creating a single merged team) introduces inefficiency and removes specialization. Option B incorrectly suggests application teams should also solve infrastructure issues, which conflicts with platform-as-a-product principles. Option D places all responsibilities on platform teams, which creates bottlenecks and undermines application team ownership.
By splitting responsibilities, IDPs empower developers with self-service provisioning while maintaining clear boundaries. This ensures both agility and accountability: platform teams focus on enabling and securing the platform, while application teams take ownership of their code and services.
--- CNCF Platforms Whitepaper
--- Team Topologies (Platform as a Product Model)
--- Cloud Native Platform Engineering Study Guide
- Select Question Types you want
- Set your Desired Pass Percentage
- Allocate Time (Hours : Minutes)
- Create Multiple Practice tests with Limited Questions
- Customer Support
Gary King
3 days agoMark Wright
12 days agoLinda Collins
1 month agoCarol Gonzalez
1 month agoDonna Jones
2 months agoMichelle King
2 months agoJeffrey Smith
3 months agoEmma Rodriguez
4 months agoAmanda Young
3 months agoChristopher Adams
3 months agoAdam Turner
3 months agoEmma Miller
3 months agoAmanda Clark
3 months agoGearldine
4 months agoMeghan
4 months agoAntione
5 months agoAdolph
5 months agoRana
5 months agoKristel
6 months agoOmer
6 months agoMarsha
6 months agoMargurite
6 months agoHeike
7 months agoKimbery
7 months agoChu
7 months agoGaynell
7 months agoElli
8 months agoCiara
8 months agoDean
8 months agoJulio
8 months agoStefany
9 months agoCarli
9 months agoLevi
9 months agoLashaunda
9 months agoIluminada
10 months agoAntione
10 months agoLucina
10 months agoFranklyn
10 months agoHoward
10 months agoLashon
11 months agoReynalda
11 months agoAmie
11 months agoBernadine
11 months agoMarla
11 months ago