CNPA Exam Dumps : Certified Cloud Native Platform Engineering Associate

The most effective approach for scalable Kubernetes infrastructure provisioning is Crossplane compositions. Option D is correct because compositions let platform teams define custom CRDs (Composite Resources) that abstract infrastructure details while embedding organizational policies and guardrails. Developers then consume these abstractions through simple Kubernetes-native APIs, enabling self-service at scale.

Option A (Helm with values.yaml) is useful for application deployment but not for scalable infrastructure provisioning across multiple clouds. Option B (imperative scripts) lacks scalability, repeatability, and governance. Option C (static YAML with kubectl apply) is manual and not suited for dynamic, multi-team environments.

Crossplane compositions allow platform teams to curate golden paths while giving developers autonomy. This reduces complexity, ensures compliance, and supports multi-cloud provisioning—all key aspects of platform engineering.

The most efficient and scalable strategy is to use a declarative approach with Infrastructure as Code (IaC). Option B is correct because declarative definitions specify the desired state (e.g., resource requests, limits, autoscaling policies) in code, allowing Kubernetes controllers and autoscalers to reconcile and enforce them dynamically. This ensures that applications can scale efficiently based on actual demand.

Option A (fixed allocation) is inefficient, leading to wasted resources during low usage or insufficient capacity during high demand. Option C (manual provisioning) introduces delays, risk of error, and operational overhead. Option D (imperative scripting) is not sustainable for large-scale or dynamic workloads, as it requires constant manual intervention.

Declarative IaC aligns with GitOps workflows, enabling automated, version-controlled scaling decisions. Combined with Kubernetes’ Horizontal Pod Autoscaler (HPA) and Cluster Autoscaler, this approach allows platforms to balance cost efficiency with application reliability.

GitOps uses a pull-based approach, where controllers inside the cluster continuously reconcile the desired state stored in Git with the actual cluster state. Option A is correct because GitOps sync agents (e.g., Argo CD, Flux) poll or watch Git repositories for changes and automatically apply updates to the cluster.

Option B reverses the model—clusters do not send updates to Git; Git is the source of truth. Option C is partially misleading: webhooks can trigger faster syncs but reconciliation is still pull-based. Option D misrepresents GitOps—Git never pushes directly to clusters.

This pull-based approach ensures greater security (clusters pull changes rather than exposing themselves to pushes), consistency (Git as source of truth), and continuous reconciliation (drift correction).