CAINP Capstone - Exam

Please answer the questions below to complete the test.

Question 1

In the Model Context Protocol, what is a 'tool'?

Select one answer

A callable capability the server exposes for an agent to invoke

A Kubernetes CRD

A Grafana dashboard panel

A type of load generator

Question 2

Why start an MCP tool for operations as read-only?

Select one answer

Read-only tools are faster to build and require no schema

It minimizes blast radius while the agent observes and diagnoses

Kubernetes does not allow write access from agents

Read-only tools cannot be audited

Question 3

Which signals would you use to detect that a Deployment rollout is failing? (Select all that apply.)

Select all that apply

rollout status / available vs. desired replicas

Pod readiness and restart counts

Kubernetes events for the workload

The number of tokens in the agent's prompt

Question 4

What is the purpose of an approval gate in an agent-driven remediation loop?

Select one answer

To make the agent run faster

To require human review and authorization before a change is applied

To disable Meshery validation

To increase the model's context window

Question 5

Which Meshery capability measures latency and throughput of an endpoint over repeatable runs?

Select one answer

Performance Profiles

MeshSync

Relationships

Workspaces

Question 6

Name one load generator Meshery can use for performance testing.

Type your answer below

Question 7

What does 'least privilege' mean for an automation/agent identity?

Select one answer

Grant cluster-admin so the agent never gets blocked

Grant only the permissions required for the task, and no more

Share one token across all agents

Disable RBAC for automation namespaces

Question 8

Why is an audit trail essential when agents make infrastructure changes?

Select one answer

It speeds up model inference

It records what changed, when, and by whom for accountability and rollback

It is only needed for GPU workloads

It replaces the need for backups

Question 9

A NetworkPolicy with podSelector {} and policyTypes [Ingress] and no ingress rules does what?

Select one answer

Allows all ingress to all pods

Denies all ingress to all pods in the namespace (default-deny)

Has no effect

Blocks all egress

Question 10

True or false: comparing a post-remediation Performance Profile against a saved baseline is a valid way to confirm a workload recovered.

Type your answer below