# Which validationActions value makes a Kyverno ValidatingPolicy reject a request that fails a validation?

Kyverno, Easy (Beginner), Validation. https://k8wiz.com/uquiz/which-validationactions-value-makes-a-kyverno-validatingpolicy-reject-a-request-that-fails-a-validation

- A. Enforce
- B. Warn
- C. Audit
- D. Deny

**Answer:** Deny

**Explanation:** ValidatingPolicy accepts Deny, Audit and Warn in spec.validationActions, the same values as a Kubernetes ValidatingAdmissionPolicy binding. Deny blocks the request, Audit only records the result in policy reports and Warn returns a warning to the client. Enforce is the old validationFailureAction value from ClusterPolicy and is not valid here.