Linux Foundation CNPA Exam With Confidence Using Practice Dumps

In GitOps workflows, the source of truth for environments is stored in Git. Promotion from staging to production is managed by merging changes into the production branch or repository. Option A is correct because once changes are merged, the GitOps operator (e.g., Argo CD, Flux) automatically detects the updated desired state in Git and reconciles it with the production environment.

Option B (creating new environments each time) is inefficient and unnecessary. Option C (manual updates) violates GitOps principles of automation and auditability. Option D (direct deployments) reverts to a push-based CI/CD model rather than GitOps’ pull-based reconciliation.

By relying on Git as the single source of truth, GitOps ensures version control, auditability, and rollback capabilities. This allows consistent, reproducible promotion between environments while reducing human error.

Modern platform engineering requires security and compliance to be integral parts of the delivery process, not afterthoughts. CI/CD pipelines are the foundation for delivering platform software rapidly and reliably, and integrating SBOM generation and automated vulnerability scanning directly within pipelines ensures that risks are identified early in the lifecycle.

Option B is correct because it reflects recommended practices from cloud native platform engineering standards: SBOMs provide a transparent inventory of all software components, including dependencies, which is crucial for vulnerability management, license compliance, and supply chain security. By automating these steps in CI/CD, teams can maintain both velocity and security without manual overhead.

Option A downplays the relevance of SBOMs for platform software, which is inaccurate because platform components (like Kubernetes operators, ingress controllers, or logging agents) are equally susceptible to vulnerabilities. Option C dismisses automation in favor of periodic audits, which contradicts the shift-left security principle. Option D misunderstands CI/CD’s purpose: security must be integrated, not separated.

The defining capability of an IDP is enabling self-service so developers can independently access infrastructure and platform resources. Option D is correct because self-service resource provisioning APIs allow developers to provision resources such as namespaces, databases, or environments without relying on manual intervention from the platform team. These APIs embed governance, compliance, and organizational guardrails while giving autonomy to development teams.

Option A (manual deployment services) defeats the purpose of self-service. Option B (knowledge centers) improve documentation but do not provide automation. Option C (logging/monitoring interfaces) are observability tools, not resource provisioning mechanisms.

Self-service APIs empower developers, reduce cognitive load, and minimize bottlenecks. They also align with the platform engineering principle of “treating the platform as a product,” where developers are customers, and the platform offers curated golden paths to simplify consumption of infrastructure and services.