Kubernetes Namespaces and CNI Plug-Ins JN0-214 Practice Questions (Page 3)

Questions 11–15

1. 11application · easy

   A developer wants to deploy a pod to the 'development' namespace using a YAML file. Which field must be added to the metadata section of the YAML?

   • Aannotations: namespace: development
   • Bnamespace: development
   • Clabels: namespace: development
   • Dname: development
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which statement accurately describes how Kubernetes namespaces provide isolation?

   • ANamespaces isolate resources at the kernel level, providing complete isolation between workloads
   • BNamespaces provide strong security isolation by default, preventing all cross-namespace communication
   • CNamespaces provide logical isolation, allowing resources to be grouped and managed separately, but do not isolate network traffic by default
   • DNamespaces isolate only storage resources, not compute resources like pods
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which kubectl command lists all namespaces in a cluster?

   • Akubectl show namespaces
   • Bkubectl list namespaces
   • Ckubectl get namespaces
   • Dkubectl describe namespaces
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A company runs a production Kubernetes cluster with multiple namespaces: 'frontend', 'backend', and 'data'. They use Calico as the CNI plug-in. The security team requires that the 'data' namespace pods can only be accessed by pods in the 'backend' namespace. The development team wants to deploy a new service in the 'data' namespace that must be reachable from the 'frontend' namespace for a new feature. How should you reconcile these requirements?

   • ACreate a NetworkPolicy in the 'data' namespace that allows ingress from both 'backend' and 'frontend' namespaces.
   • BDisable NetworkPolicy enforcement for the 'data' namespace.
   • CMove the new service to the 'backend' namespace and expose it to 'frontend' via a service.
   • DUse a single NetworkPolicy that allows all ingress to the 'data' namespace.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A Kubernetes cluster uses Calico as the CNI plug-in. A pod on node A cannot communicate with a pod on node B. Both pods are running and have IP addresses. Which component is most likely responsible for the communication failure?

   • AThe kube-apiserver
   • Bkube-proxy
   • CThe container runtime
   • DCalico's routing or overlay configuration
   Reveal Solution Discussion Select an answer first