Free Practice Questions for Linux Foundation CNPA Exam

Automation in DevOps practices is central to platform engineering because it enables faster, reliable, and repeatable deployments. Option D is correct: automation accelerates deployments, reduces bottlenecks, and enables continuous delivery and rapid iterations. By automating build, test, and deployment pipelines, teams can deliver new features quickly while maintaining high quality and compliance.

Option A is incorrect because automation does not reduce the need for communication—it complements collaboration by removing friction. Option B is unrealistic: some manual oversight may remain (e.g., in production approvals for sensitive workloads). Option C is not a primary benefit—while tools may be involved, the focus is on outcomes, not tool dependency.

By embedding automation, teams reduce toil, enforce consistency, and free developers to focus on value creation rather than repetitive tasks. This results in shorter lead times, higher deployment frequency, and overall improved developer experience, which aligns with DORA metrics.

One of the primary objectives of internal developer platforms (IDPs) is to improve developer experience by reducing cognitive load. Complex Kubernetes configurations often overwhelm developers who simply want to consume services and deploy code without worrying about infrastructure intricacies.

Option B is correct because implementing a self-service web portal (or developer portal) abstracts away Kubernetes complexities, providing developers with easy access to platform services through standardized workflows, templates, and golden paths. This aligns with platform engineering principles: empowering developers with self-service capabilities while maintaining governance, security, and compliance.

Option A increases burden unnecessarily and negatively impacts productivity. Option C limits access to services, reducing flexibility and developer autonomy, which goes against the core goal of IDPs. Option D, while helpful for education, does not remove complexity—it only shifts the responsibility back to the developer. By leveraging portals, APIs, and automation, platform teams allow developers to focus on building business value instead of managing infrastructure details.

The primary goal of platform engineering is to create reusable, scalable platforms that improve both developer productivity and developer experience. Option D is correct because platform engineering treats the platform as a product, providing self-service capabilities, abstractions, and golden paths that reduce cognitive load for developers while embedding organizational guardrails.

Option A is too narrow—platform engineering is not limited to infrastructure automation but extends to developer usability, observability, and governance. Option B is incorrect because limiting access contradicts the principle of empowering developers through self-service. Option C is misleading; platform engineering complements DevOps practices but does not replace them.

By enabling developers to consume infrastructure and platform services through self-service APIs and portals, platform teams accelerate delivery cycles while maintaining compliance and security. This approach results in improved efficiency, reduced toil, and better alignment between business and engineering outcomes.

The use of minimal base container images and Software Bill of Materials (SBOM) attestation is a best practice for strengthening software supply chain security. Option B is correct because smaller base images contain fewer components, which inherently reduces the attack surface and the number of potential vulnerabilities. SBOMs, meanwhile, provide a detailed inventory of included libraries and dependencies, enabling vulnerability scanning, license compliance, and traceability.

Option A is only a partial benefit, not the primary goal. Option C (maximum flexibility) contradicts the principle of minimal images, which deliberately restrict included software. Option D (reducing storage costs) may be a side effect but is not the core benefit in a security-focused context.

By combining minimal images with SBOM practices, platform teams ensure stronger compliance with supply chain security frameworks, enable early detection of vulnerabilities in CI/CD pipelines, and support fast remediation. This is emphasized in CNCF security and platform engineering guidance as a way to align with zero-trust principles.

In multi-cluster Kubernetes environments, the challenge lies in consistently deploying interdependent applications across clusters while ensuring reliability and repeatability. The Cloud Native Platform Engineering guidance stresses the importance of a declarative approach to define applications as code, which enables teams to describe the entire application system—including dependencies, configuration, and policies—in a single manifest. This ensures that applications are treated as a cohesive unit rather than isolated workloads.

Option A is correct because declarative application deployment definitions (often managed through GitOps practices) allow for consistent and automated reconciliation of desired state versus actual state across multiple clusters. This approach supports scalability, disaster recovery, and compliance by ensuring identical deployments across environments.

Option B (separate repos per application) increases fragmentation and does not inherently manage interdependencies. Option C (direct deployments from CI/CD) bypasses the GitOps model, which reduces auditability and consistency. Option D (Helm with manual deployments) partially addresses packaging but lacks the automation and governance needed in a multi-cluster setup.