Kubernetes Namespaces and CNI Plug-Ins JN0-214 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which CNI plug-in is often chosen for its simplicity and ease of setup, making it a good choice for small clusters or learning environments?

   • AWeave
   • BCilium
   • CCalico
   • DFlannel
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company runs a multi-tenant Kubernetes cluster where each business unit has its own namespace. The finance team deploys a web application that must only be reachable by the finance team's backend services, not by services in other namespaces. The cluster uses Calico as the CNI plug-in. Which action should you take to enforce this isolation?

   • AUse a private registry for finance images and restrict pull access to the finance namespace.
   • BPlace the finance web application in a dedicated node pool and use node selectors to prevent other pods from scheduling there.
   • CAssign a unique service account to the finance namespace and use RBAC to restrict access to the service.
   • DCreate a NetworkPolicy that selects the finance pods and allows ingress only from the finance namespace's backend pods.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the primary purpose of a Kubernetes namespace?

   • ATo provide a logical partition of cluster resources for organizing and isolating objects
   • BTo define the storage class used by persistent volumes in a cluster
   • CTo allocate physical hardware resources to specific applications
   • DTo enforce network security policies between all pods in a cluster
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   You are troubleshooting why pods on different nodes in a Kubernetes cluster cannot communicate with each other. The cluster was installed with kubeadm and uses Flannel as the CNI plug-in. The kubelet is running, and the Flannel daemonset pods are all in the Running state. Which component is most likely misconfigured?

   • AThe kube-proxy configuration
   • BThe kube-apiserver configuration
   • CThe CNI configuration file in /etc/cni/net.d/
   • DThe container runtime socket path
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which kubectl command creates a new namespace named 'staging'?

   • Akubectl create namespace staging
   • Bkubectl create ns staging --generate-name
   • Ckubectl new namespace staging
   • Dkubectl apply namespace staging
   Reveal Solution Discussion Select an answer first