Skip to content

20 Free CGOA Sample Questions with Answers

By Ibrahim Yesilay · Published · Updated

Here are 20 free CGOA sample questions with answers, taken from the GoldenKube question bank and grouped by exam domain. Every question has the correct answer marked and a written explanation, so you can check what you know and see why the wrong options fail. Certified GitOps Associate is a multiple-choice exam; this set is independent practice and not affiliated with the Linux Foundation.

How to use these CGOA practice questions

Work through the 20 CGOA sample questions in one sitting without looking anything up. For each question, decide on an answer first, then open the answer and read the explanation, including when you were right, because a correct guess and a correct line of reasoning look identical until the exam rewords the question. Mark every question as right, wrong or guessed, and count a guess as wrong when you score yourself. Give the set about 30 minutes, which is the average time per question on the real exam multiplied by twenty. The aim is to find out which exam domains are already solid and which ones need study before you buy the exam.

The official exam format is 60 questions in 90 minutes, with a passing score of 75%, according to the Linux Foundation documentation checked on 2026-10-23.

With JavaScript enabled, each answer starts collapsed behind a Show answer button so you can test yourself. Without JavaScript, and for any crawler or screen reader that reads the raw page, every answer and explanation is already visible below its question.

These questions were written for GoldenKube practice. They are not copied from the real exam, and nothing on this page tells you what the real exam will ask.

  • Read the question twice and underline the constraint words: "most", "least", "first", "only", "not".
  • Eliminate options you can prove wrong before you pick between the rest.
  • Where a question says to select all that apply, every correct option must be chosen and none of the wrong ones.
  • Read the explanation even for questions you got right; it often names the nearby concept the exam likes to swap in.

GitOps Terminology (4 questions)

Question 1

What is the purpose of branch protection rules in GitOps?
  1. A.To prevent unauthorized changes to critical branches
  2. B.To speed up deployments
  3. C.To automate testing
  4. D.To manage dependencies

Correct answer: A

Branch protection rules prevent direct modifications to important branches, ensuring all changes go through proper review processes.

Question 2

What is drift in the context of GitOps?
  1. A.When the actual state differs from the desired state
  2. B.When code changes are pushed to production
  3. C.When Git repositories are out of sync
  4. D.When applications fail to deploy

Correct answer: A

Drift occurs when the runtime environment (actual state) no longer matches the configuration defined in Git (desired state).

Question 3

What is the role of pull requests in GitOps?
  1. A.To deploy code to production
  2. B.To monitor system health
  3. C.To propose and review changes to system state
  4. D.To manage container images

Correct answer: C

Pull requests provide a mechanism to propose, review, and approve changes to the system state before they are applied.

Question 4

Which environment type typically has the strictest change control in GitOps?
  1. A.Development
  2. B.Testing
  3. C.Staging
  4. D.Production

Correct answer: D

Production environments typically have the strictest change control procedures to ensure stability and reliability.

GitOps Principles (6 questions)

Question 5

Which principle ensures that all changes are traceable?
  1. A.Versioned and immutable
  2. B.Continuous deployment
  3. C.Declarative configuration
  4. D.Automated reconciliation

Correct answer: A

The versioned and immutable principle ensures all changes are recorded in Git, making them traceable and auditable.

Question 6

In GitOps, what does 'continuous reconciliation' mean?
  1. A.The system periodically checks and corrects any drift between the actual and desired state.
  2. B.Developers must manually approve every change before it is applied.
  3. C.The desired state is only checked once per deployment cycle.
  4. D.The system ignores any changes made outside of Git.

Correct answer: A

Continuous reconciliation means the system constantly monitors and automatically corrects any differences (drift) between the actual state of the system and the desired state defined in Git.

Question 7

Why is immutability important in GitOps?
  1. A.It ensures auditability and reliability
  2. B.It prevents any system changes
  3. C.It makes deployments faster
  4. D.It reduces storage costs

Correct answer: A

Immutability creates a reliable audit trail and ensures complete history of all system changes.

Question 8

What happens when drift is detected in a GitOps system?
  1. A.The system shuts down
  2. B.An alert is generated
  3. C.The system automatically reconciles the state
  4. D.Manual intervention is required

Correct answer: C

When drift is detected, GitOps systems automatically apply the necessary changes to align with the desired state in Git.

Question 9

Which of the following is NOT one of the four key GitOps principles?
  1. A.Declarative
  2. B.Versioned and immutable
  3. C.Manually approved
  4. D.Continuously reconciled

Correct answer: C

The four GitOps principles are: declarative, versioned and immutable, pulled automatically, and continuously reconciled. Manual approval contradicts the automated nature of GitOps.

Question 10

What is the primary advantage of pull-based deployment?
  1. A.Faster deployments
  2. B.Lower resource usage
  3. C.Simplified configuration
  4. D.Enhanced security

Correct answer: D

Pull-based deployment enhances security by eliminating the need for external systems to have direct access to the cluster.

Related Practices (3 questions)

Question 11

Which practice focuses on automated security testing?
  1. A.CI/CD
  2. B.DevSecOps
  3. C.IaC
  4. D.CaC

Correct answer: B

DevSecOps emphasizes automated security testing and integrating security practices throughout the development lifecycle.

Question 12

What monitoring approach works best with GitOps?
  1. A.Observability through metrics, logs, and traces with comprehensive system visibility and automated alerting for operational insight
  2. B.Manual log review with human analysis and periodic inspection for basic monitoring and issue identification
  3. C.Simple uptime checks with basic availability monitoring and limited health assessment for service status verification
  4. D.Network monitoring only with traffic analysis and connectivity assessment for infrastructure performance and availability

Correct answer: A

GitOps works best with comprehensive observability that includes metrics, logs, and distributed traces, providing full visibility into application and infrastructure behavior.

Question 13

What is the primary benefit of using pull requests in GitOps?
  1. A.Code review, validation, and controlled deployment with comprehensive change approval and quality assurance processes
  2. B.Faster development cycles with accelerated deployment and reduced development overhead for rapid iteration
  3. C.Automated testing with integrated validation and streamlined quality control for continuous deployment workflows
  4. D.Repository synchronization with coordinated updates and unified version management for distributed development teams

Correct answer: A

Pull requests provide a mechanism for peer review, automated testing, policy validation, and controlled integration of changes before they affect production environments.

GitOps Patterns (4 questions)

Question 14

Which deployment strategy maintains two identical environments?
  1. A.Rolling update
  2. B.Blue-Green deployment
  3. C.Canary release
  4. D.A/B testing

Correct answer: B

Blue-Green deployment maintains two identical environments, allowing immediate switching between versions for zero-downtime deployments.

Question 15

What is the primary advantage of pull-based patterns?
  1. A.Faster deployments
  2. B.Improved performance
  3. C.Better security control
  4. D.Simplified configuration

Correct answer: C

Pull-based patterns improve security by eliminating the need for external systems to have direct access to the cluster.

Question 16

What is the advantage of using feature flags?
  1. A.Improved security
  2. B.Better performance
  3. C.Simplified deployment
  4. D.Runtime feature control

Correct answer: D

Feature flags provide runtime control over features, allowing them to be enabled or disabled without requiring redeployment.

Question 17

Which deployment strategy allows traffic to be gradually shifted from an old version to a new version of an application?
  1. A.Blue-Green
  2. B.Canary
  3. C.Rolling Update
  4. D.Recreate

Correct answer: B

Canary deployments incrementally shift traffic to the new version, reducing risk and allowing for monitoring before full rollout.

Tooling (3 questions)

Question 18

Which feature is essential for GitOps tools?
  1. A.Built-in CI capabilities with continuous integration and automated testing for comprehensive development workflows
  2. B.Container image scanning with vulnerability assessment and security validation for production readiness
  3. C.Drift detection and auto-sync
  4. D.Load balancing with traffic distribution and performance optimization for application scalability and availability

Correct answer: C

GitOps tools must be able to detect when the actual state differs from the desired state in Git and automatically synchronize to maintain consistency.

Question 19

Which GitOps tool is part of the CNCF (Cloud Native Computing Foundation)?
  1. A.ArgoCD with comprehensive application deployment and cluster management for enterprise Kubernetes environments
  2. B.GitLab with integrated version control and continuous deployment for unified development workflows and DevOps automation
  3. C.Flux
  4. D.Jenkins X with automated CI/CD pipelines and cloud-native development workflows for Kubernetes application delivery

Correct answer: C

Flux is a CNCF graduated project that provides GitOps capabilities for Kubernetes, with a focus on simplicity and composability.

Question 20

What is the main function of ArgoCD?
  1. A.Container building
  2. B.Code testing
  3. C.GitOps controller
  4. D.Log management

Correct answer: C

ArgoCD functions as a GitOps controller that automates the synchronization between Git repositories and Kubernetes clusters.

Score yourself

The Linux Foundation lists a passing score of 75% for CGOA. On a set of 20 questions that is 15 correct. Reaching 15 here is a useful signal and not a prediction: 20 questions is a small sample, and the real exam covers every domain in its published weights. Use the table below to decide what to do next. Count only the questions you answered correctly without help, and be strict about it: a question you got right for the wrong reason belongs in the missed pile. Then repeat the exercise a few days later with a different set from the full bank so that you are measuring understanding and not memory of these specific questions.

Count your misses per domain, using the headings above. One missed question in a domain is noise; three misses in one domain is a study plan. The practice mode on GoldenKube does this sorting for you by sending you back to the domains where you are weakest.

Correct out of 20What it suggestsWhat to do next
18 to 20The basics are solid in the domains sampled.Move to harder mixed practice and check the domains this set did not cover.
15 to 17Close to the benchmark, with some gaps.Review every missed explanation, then practise the domains where you missed questions.
11 to 14Several domains need real study.Read the official curriculum for those domains, then return to practice.
0 to 10You are early in your preparation.Start from the curriculum and the project documentation, then retry this set.

GitOps Terminology: what it tests

GitOps Terminology is where CGOA checks that you use the words correctly. Expect the definitions of GitOps itself, desired state and actual state, a state store, drift, reconciliation, declarative versus imperative configuration, pull versus push delivery, and what an agent or operator does. Questions are mostly definitions and short scenarios asking which term applies. The trap is loose use of everyday words: a pipeline that applies changes with kubectl from CI is push-based, while an in-cluster agent that fetches and applies is pull-based, and the exam treats that difference as important. Getting the vocabulary exact makes the larger principles domain much easier.

Write a one-line definition for each term, then test yourself by covering the term and recognising it from the definition. Terminology questions are a recognition task, so this drill matches the format.

GitOps Principles: what it tests

GitOps Principles is the largest CGOA domain and centres on the four OpenGitOps principles: the system is described declaratively, the desired state is versioned and immutable, approved changes are pulled automatically, and software agents continuously reconcile actual state with desired state. Questions give a setup and ask which principle it satisfies or violates, or ask what follows from a principle, such as why a Git history gives you an audit trail and a rollback path. A common trap is the word immutable: it describes the stored history of desired state, not the running cluster, and applying changes by hand to a live system breaks the reconciliation principle.

Memorise the four principles in order and attach to each one a concrete consequence, such as rollback by revert or detection of drift. The exam asks for consequences more often than for the list itself.

Related Practices: what it tests

Related Practices places GitOps among its neighbours. Expect continuous integration and continuous delivery, infrastructure as code, DevOps culture, configuration management, and how GitOps relates to platform engineering and to progressive delivery. Questions ask what GitOps adds to a practice or where one practice ends and another begins. The trap is assuming GitOps replaces continuous integration: it does not, because building and testing still happen in a CI system, and GitOps takes over at the point where a change to desired state is merged and delivered. Knowing that boundary resolves many of the questions in this domain. Expect scenario wording that names a practice and asks what it contributes to a delivery process.

Draw a delivery timeline from commit to running workload and mark which stages belong to CI, which to GitOps and which to infrastructure as code. The picture answers the boundary questions directly.

GitOps Patterns: what it tests

GitOps Patterns covers the common ways of organising GitOps in practice. Expect repository layouts such as a monorepo versus several repositories, separating application code from environment configuration, promotion between environments, handling secrets without storing them in plain text, and progressive delivery patterns. Questions describe a team or constraint and ask which layout or pattern fits. The trap is choosing the pattern that sounds most advanced rather than the one that fits the stated constraint, such as separate repositories when the question stresses simplicity for a small team. Read the constraint first and treat the options as candidates to eliminate. When two options both seem workable, choose the one that matches the team size, the risk and the separation of duties that the question states.

For each pattern, write the problem it solves and the cost it adds. Matching a constraint to a pattern is the same exercise the questions ask for.

Tooling: what it tests

Tooling asks what the common GitOps and related tools do. Expect the roles of tools such as Argo CD and Flux as reconciliation agents, Helm and Kustomize for packaging and customising manifests, and the ways tools detect drift, sync and report status. Questions focus on what a category of tool is for, not on exact command syntax. The trap is mixing up a packaging tool with a delivery agent: Helm renders and installs charts, while a GitOps agent keeps the cluster aligned with a repository over time. The domain is the smallest, so a short review of each tool's job is enough.

Keep one line per tool: what it takes in, what it produces, and whether it keeps running. That distinction is what separates the tool types in the answer options.

What a 20-question CGOA sample can and cannot tell you

A set of 20 questions is a screening test, not a measurement. With only a few questions per domain, one lucky guess or one unlucky wording moves your result by five percentage points, and a domain with only two questions behind it says almost nothing about that domain's true strength. The set is also fixed, so after one read-through it measures your memory of these items and not your command of CGOA. Use it to choose where to start studying, not to decide whether you are ready, and then rely on the larger bank, where questions repeat only after a gap and the app tracks which domains stay weak.

A second limit is style. Written practice questions share one author voice, while a real exam draws on many writers and reads differently. Treat any practice score, here or elsewhere, as one input next to the official curriculum, hands-on experience with the technology, and the documentation of the project itself.

A one-week plan after the CGOA sample set

After the sample set, spend a week turning the result into a plan. Start with the domains where you missed questions and read the matching part of the official curriculum before you try more questions, because practice is far more useful once you can explain the topic. Return to practice in short daily sessions, review every missed question the next day, and leave the last day for a fresh mixed set. Keep a simple note of which concepts caused misses; the same three or four ideas usually explain most of them, and naming them is what turns practice into progress.

The largest CGOA domain is GitOps Principles, at 30% of the published weights. If two domains tie for weakest in your tally, start with the heavier one, and keep the other 4 domains ticking over with short reviews.

Adjust the pace to your calendar. If you have more time, spread the same steps over two or three weeks and add a second mixed session at the end of each week. If you have less, keep days 1 to 3 and day 6 and accept a rougher picture. What matters is that every study session starts from a specific weak domain and ends with a check, not that the plan is followed to the letter.

DayTask
1Tally misses per domain and rank the domains from weakest to strongest.
2Read the official curriculum and documentation for the weakest domain.
3Practise that domain in the app and read every explanation.
4Repeat the exercise for the second weakest domain.
5Review the questions you missed on days 3 and 4 without looking at notes.
6Do a mixed session across all domains and compare the result with this page.
7Rest, then retake the 20 questions on this page and note which misses persist.

Practice the full CGOA bank

These 20 questions are a small slice of the GoldenKube CGOA bank, which holds more than 250 questions. In practice mode the app serves the questions you are due to review first, then the domain where you are weakest, and it brings missed questions back after a gap until you answer them correctly. You can answer 10 questions as a guest without an account; after that a free account keeps your progress, and no credit card is asked for at any point. Each answer comes with the same kind of written explanation you saw on this page, so a wrong answer is always followed by the reasoning that fixes it.

Practice mode shows one question at a time and gives the verdict and explanation as soon as you answer. A focus option lets you stay inside a single domain until it feels solid, which is the natural next step after finding your weakest domain on this page. There is no timer and no exam simulation in practice mode; the goal is learning, not performance under pressure.

Frequently asked questions

Are these the real CGOA exam questions?

No. They are practice questions written for GoldenKube to cover the published CGOA domains. GoldenKube does not have the real exam, does not claim any overlap with it, and does not sell or share exam content. Use them to find gaps in your understanding, not to predict what you will be asked.

How many CGOA questions does GoldenKube have?

The CGOA bank holds more than 250 questions as of 2026-10-23. This page shows 20 of them. The full bank is available in practice mode, where the app chooses what to show you next based on what you have already answered and what you got wrong.

Do the answers come with explanations?

Yes. Every question on this page has the correct answer marked and a written explanation of why it is correct and, where useful, why the other options are not. Only questions that have an explanation are published on public pages, and where a question carries references they are listed under the explanation.

Is this free?

Yes. Reading this page needs no account. In the practice app you can answer 10 questions as a guest, and then you create a free account to continue. No credit card is requested at any point.

How were these 20 questions chosen?

A script picks them with a fixed seed, so the set does not change between visits. It considers only questions that have a written explanation and tries to follow the published domain weights. The domain labels in the bank do not always match the official wording, so a domain can be thinly represented in a single set of 20; the full bank is the better measure of coverage.

How often is this page updated?

The exam facts and the domain list were last checked against the Linux Foundation pages on 2026-10-23, and the page shows its update date at the top. When the curriculum changes or questions are added, corrected or removed in the bank, the page is reviewed again.

Independent community project, not affiliated with or endorsed by CNCF or The Linux Foundation.