Linux Foundation Updated CGOA Exam Questions and Answers by melania

In GitOps, thedesired stateis stored in Git. Manual updates applied directly to the cluster (via kubectl or APIs) change theactual statewithout updating Git. This introducesdriftbetween actual and desired state.

“Manual changes to the runtime environment cause the actual state to diverge from the desired state stored in Git. This drift must be detected and reconciled automatically.”

Thus, the correct answer isC.

The core foundation of GitOps is that Git serves as the single source of truth for the desired state of both applications and infrastructure. This means all configuration is declared in Git in a version-controlled, auditable, and verifiable manner. Operators and reconciliation agents continuously pull these definitions to ensure the live system matches what Git declares.

“Declarative descriptions of the desired state of the system must be versioned in Git, making Git the single source of truth. This provides auditability, reliability, and enables rollbacks by reverting changes in Git.”

This principle ensures that any change in system state is traceable through Git commits, making environments predictable, reproducible, and transparent.

GitOps enhancesDevSecOpsby ensuring security-related configurations and changes are stored in version control, where acomplete audit historyis available. This provides traceability, accountability, and compliance enforcement.

“With GitOps, the entire version history of desired state changes is stored immutably in Git. This audit trail supports security and compliance goals in DevSecOps practices.”

Thus, the correct answer isB.

GitOps requires apull-based approachas the default model, where agents in the cluster automatically pull desired state from Git. However,push-based triggers(e.g., webhooks) can optionally be used to complement pull-based reconciliation.

“Pull-based reconciliation is required in GitOps to ensure automation and security. Push-based triggers may optionally complement this, but the pull model is fundamental.”

Thus, the correct answer isD.