CompTIA Linux+ XK0-006 (V8) Practice Question

A company is migrating its Kubernetes deployment pipeline to a GitOps workflow. Security requirements mandate that:

  1. The Git repository must remain the single source of truth for the cluster's desired state.
  2. CI jobs must never store or transmit long-lived Kubernetes credentials.
  3. Configuration drift introduced directly in the cluster must be detected and automatically corrected.

Which implementation best satisfies all of these requirements?

  • Configure a post-merge job in the CI server that runs kubectl apply using a kubeconfig stored as a CI secret.

  • Allow operators to run kubectl apply manually from a secured bastion host after reviewing Git history.

  • Use Terraform Cloud to run remote kubectl commands against the cluster whenever a commit is pushed.

  • Deploy an in-cluster, pull-based reconciler such as Flux or Argo CD that continuously syncs the cluster with the main Git branch.

CompTIA Linux+ XK0-006 (V8)
Automation, Orchestration, and Scripting
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot