# In recent Kyverno versions, where should you set Enforce or Audit for a validate rule?

Kyverno, Hard (Expert), Validation. https://k8wiz.com/uquiz/in-recent-kyverno-versions-where-should-you-set-enforce-or-audit-for-a-validate-rule

- A. In the kyverno ConfigMap, under an enforcement key
- B. In validate.failureAction on each rule
- C. With a kyverno.io/mode annotation on the policy
- D. Only in spec.validationFailureAction at the policy level

**Answer:** In validate.failureAction on each rule

**Explanation:** Setting the action per rule lets one policy mix enforced and audited rules. Policies that still set spec.validationFailureAction keep working, but the field is deprecated, so new policies should use validate.failureAction.