Orchestration CV0-004 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A security team is reviewing a Kubernetes cluster that runs a multi-tier application. They need to ensure that the frontend pods can only communicate with the backend pods on port 8080, and that no other pods in the cluster can reach the backend. Which Kubernetes resource should they implement?

   • AA Service of type ClusterIP that exposes the backend pods on port 8080.
   • BA Secret that stores the backend's port number and is mounted into the frontend pods.
   • CA ResourceQuota that limits the number of pods in the backend namespace.
   • DA NetworkPolicy that allows ingress traffic to the backend pods only from the frontend pods on port 8080.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   In Kubernetes, which built-in mechanism provides service discovery by assigning a stable DNS name to a Service?

   • Aetcd
   • Bkube-proxy
   • CKubeDNS / CoreDNS
   • DIngress Controller
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the primary purpose of monitoring in a container orchestration environment?

   • ATo replace the need for load balancing
   • BTo track the health and performance of containers and the cluster
   • CTo manage user access to the cluster
   • DTo automatically build container images
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A team has deployed a stateful database as a single pod in a Kubernetes cluster. The application that connects to it is running as three replicas. The team wants the application to always connect to the database pod using a stable network identity, even if the database pod is rescheduled to a different node. Which Kubernetes resource should be used?

   • AA NetworkPolicy that allows traffic only from the application pods to the database pod.
   • BA PersistentVolumeClaim that provides stable storage for the database.
   • CA ConfigMap that stores the database pod's IP address for the application to read.
   • DA Service of type ClusterIP that selects the database pod by its labels.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the primary purpose of service discovery in container orchestration?

   • ATo monitor the health of containerized applications
   • BTo allow containers to find and communicate with each other without hardcoding IP addresses
   • CTo manage user authentication and authorization
   • DTo build container images automatically
   Reveal Solution Discussion Select an answer first