Course Test

Question 1

What is the key difference between schema validation and relationship validation in Meshery?

Select one answer

Schema validation is faster; relationship validation is slower

Schema validation checks structural correctness; relationship validation checks semantic wiring between components

Schema validation runs in CI; relationship validation runs only in production

Schema validation uses OPA; relationship validation uses the Kubernetes API

Question 2

Which mesheryctl command imports an AI-generated Kubernetes manifest into Meshery for validation?

Type your answer below

Question 3

An AI-generated Deployment has replicas: 2 but no PodDisruptionBudget. What is the risk, and which checklist category covers it?

Select one answer

The Deployment may exceed namespace quota; covered by the Policy category

Both replicas can be terminated simultaneously during a node drain; covered by the Resources category

The container may run as root; covered by the Security category

The image tag may be mutable; covered by the Correctness category

Question 4

Which of the following guardrails protect a namespace from AI-generated workloads that omit resource constraints? Select all that apply.

Select all that apply

ResourceQuota

LimitRange

PodDisruptionBudget

NetworkPolicy

Question 5

Why does the checklist's Security category require checking that container images use pinned tags or digests rather than the :latest tag?

Select one answer

Because :latest images are always larger and consume more cluster resources

Because mutable tags can silently resolve to different images between deployments, making rollbacks unreliable

Because Meshery's registry does not support mutable tags

Because Kubernetes rejects :latest images by default

Question 6

In the shift-left validation sequence for AI-generated infrastructure, what happens at step 3 (policy evaluation) and what tool executes it?

Select one answer

Kubernetes applies admission webhooks using kube-apiserver

The CI pipeline runs kubectl apply --dry-run against a live cluster

Meshery evaluates OPA-based Rego rules attached to the target environment, enforcing standards that schema validation cannot express

A human reviewer manually checks the manifest against a printed policy document