In a NetworkPolicy, what does the `ingress` field define?

Rules for traffic to external services

Rules for traffic between pods in the same namespace

Rules for traffic leaving the selected pods

Rules for traffic entering the selected pods

To create a default-deny ingress policy for all pods in a namespace, what should the `podSelector` be?

A `matchExpressions` with `Exists` on the `kubernetes.io/metadata.name` label

A `namespaceSelector` that matches the current namespace

A specific label like `app: frontend`

What is the purpose of a default-deny NetworkPolicy?

To block traffic from external IP addresses only

To block all ingress and egress traffic to/from the selected pods unless explicitly allowed

To allow all traffic by default and only block specific traffic

To deny traffic to pods that do not have a specific label

Certified Kubernetes Administrator (CKA)

Domain 5Objective 2

Define and Enforce Network Policies CKA Practice Questions (Page 2)

Part of the Servicing and Networking domain, which accounts for 20% of the CKA exam. Linux Foundation does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 2–3 from this objective — we provide 12 practice questions to prepare you well beyond it. (estimate)

12questions here

3free pages

7concepts

20%of the exam

Questions 6–10

6foundation · easy
Which field in a NetworkPolicy rule allows you to select pods from a different namespace?
Select an answer first
7foundation · easy
In a NetworkPolicy, what does the `ingress` field define?
Select an answer first
8foundation · easy
Which field in a NetworkPolicy would you use to allow pods to make outbound connections to a database?
Select an answer first
9foundation · easy
To create a default-deny ingress policy for all pods in a namespace, what should the `podSelector` be?
Select an answer first
10foundation · easy
What is the purpose of a default-deny NetworkPolicy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CKA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “CKA” is a trademark of its owner, used for identification only.

Define and Enforce Network Policies CKA Practice Questions (Page 2)

Questions 6–10

Which field in a NetworkPolicy rule allows you to select pods from a different namespace?

In a NetworkPolicy, what does the `ingress` field define?

Which field in a NetworkPolicy would you use to allow pods to make outbound connections to a database?

To create a default-deny ingress policy for all pods in a namespace, what should the `podSelector` be?

What is the purpose of a default-deny NetworkPolicy?

Keep studying — Servicing and Networking