最新のNCP-CN問題集で試験を準備する

A Platform Engineer has been tasked with building a custom image for the deployment of NKP management and worker nodes. The engineer needs to ensure that the proper package versions are used when creating these images. The security team has only authorized version 1.30.5 of Kubernetes and version 1.7.22 of containerd.
Where should the engineer go to verify that this is the version being used when building the custom image?

• A. The custom image's .env file
• B. config/pulumi/vars/pulumi.kib.config
• C. ansible/group_vars/all/defaults.yaml
• D. terraform/vars/default/terraform.tfvars

A Platform Engineer has been tasked with setting up a secure and isolated environment for managing an NKP environment. The environment will have no access to the Internet but will be required to create additional NKP clusters in the future. The security team has recommended using a bastion host to achieve this goal.
What is the primary purpose of a bastion host in this scenario?

• A. To serve as a load balancer for the NKP clusters.
• B. To store and manage sensitive data related to the cluster.
• C. To act as a firewall for the cluster, blocking all incoming traffic.
• D. To provide a secure point for creating and operating NKP clusters.

What is a prerequisite for upgrading an NKP license to Ultimate?

• A. Size the Sidecar containers appropriately to support the installation of default platform services.
• B. Size the Worker nodes appropriately to support the installation of default platform services.
• C. Size the Control Plane nodes appropriately to support the installation of default platform services.
• D. Size the ETCD nodes appropriately to support the installation of default platform services.

A company has a new DevOps team that needs to be provided cloud native computing resources. This team will need to have access to multiple NKP clusters for development, testing and validation of an in-house application. However, they also need to be restricted to a specific namespace and a consistent level of access across the clusters within this namespace so that they do not adversely impact the environment of other user groups or the clusters themselves.
As a part of this consideration, the new team also needs to be limited to the amount of storage, CPU and memory they can consume on the clusters. A Platform Engineer has been tasked with providing the appropriate level of access to the team on these multiple NKP clusters.
How should the engineer best accomplish this task?

• A. 1.Create an NKP group for the DevOps team.
  2.Assign that NKP group the proper RBAC roles in the NKP UI.
  3.Select the export to yaml option once the RBAC role assignment to that NKP group is complete.
  4.Apply the exported manifest to each of the NKP clusters using kubectl.
• B. 1.Create an NKP workspace and assign the NKP clusters to it.
  2.Create quotas for the NKP workspace.
  3.Create an NKP group for the DevOps team.
  4.Assign that NKP group the proper RBAC roles within that NKP workspace.
• C. 1.Enable Gatekeeper on the NKP clusters.
  2.Create an NKP group for the DevOps team.
  3.Assign Gatekeeper quota and authorization policies to that NKP group.
• D. 1.Create an NKP project and assign the NKP clusters to it.
  2.Create quotas for the NKP project.
  3.Create an NKP group for the DevOps team.
  4.Assign that NKP group the proper RBAC roles within that NKP project.

A Platform Engineer is a member of an IT team that provides Kubernetes clusters for three groups within a company named Fin Group, Inc.:
* Fin VD
* Fin Insurance
* Fin TravelThe engineer created workspaces for each group. Fin Group Inc. has its own Active Directory implementation, while each group uses their own Identity Provider. Now, the engineer needs to assign the Tenant Administrators role for each workspace. How will the engineer complete this task?

• A. Configure a dedicated identity provider for each group to access their own workspace.
• B. Create a role named admin-tenant-X, where X is the name of the group, and assign that role to manage the corresponding workspace.
• C. Create a role binding and assign it to manage the corresponding workspace.
• D. Configure the global Active Directory and assign a workspace admin user to each group.