Two Pods in different namespaces cannot communicate, but they could before a NetworkPolicy was applied. Which resource is most likely blocking the traffic?

A NetworkPolicy that denies traffic between namespaces

An Ingress resource misconfiguration

A misconfigured Service selector

Pods on two different nodes cannot communicate with each other, but Pods on the same node can. The CNI plugin is Calico. You check the Calico daemon sets and they are running. What is the most likely cause of the cross-node failure?

The Calico IP pool is configured with 'natOutgoing: false'

The kube-proxy is not running on one of the nodes

The NetworkPolicies are blocking cross-node traffic

The nodes are in different subnets and the Calico BGP peer is not configured

Certified Kubernetes Administrator (CKA)

Domain 2Objective 5

Troubleshoot Services and Networking CKA Practice Questions (Page 3)

Part of the Troubleshooting domain, which accounts for 30% of the CKA exam. Linux Foundation does not publish an official question count, but from its 120-minute exam (~50–80 total, ~15–24 in this domain), expect 3–5 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

8concepts

30%of the exam

Questions 11–15

11foundation · easy
A Service is not reachable on the expected port. Which field in the Service definition specifies the port that the Service listens on?
Select an answer first
12foundation · easy
A Service is not receiving traffic even though the backend Pods are running. Which command would you use to check whether the Service's endpoints are correctly populated?
Select an answer first
13foundation · easy
You need to expose a Service to external clients on a specific port on every node. Which Service type should you use?
Select an answer first
14foundation · easy
Two Pods in different namespaces cannot communicate, but they could before a NetworkPolicy was applied. Which resource is most likely blocking the traffic?
Select an answer first
15application · medium
Pods on two different nodes cannot communicate with each other, but Pods on the same node can. The CNI plugin is Calico. You check the Calico daemon sets and they are running. What is the most likely cause of the cross-node failure?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CKA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “CKA” is a trademark of its owner, used for identification only.

Troubleshoot Services and Networking CKA Practice Questions (Page 3)

Questions 11–15

A Service is not reachable on the expected port. Which field in the Service definition specifies the port that the Service listens on?

A Service is not receiving traffic even though the backend Pods are running. Which command would you use to check whether the Service's endpoints are correctly populated?

You need to expose a Service to external clients on a specific port on every node. Which Service type should you use?

Two Pods in different namespaces cannot communicate, but they could before a NetworkPolicy was applied. Which resource is most likely blocking the traffic?

Pods on two different nodes cannot communicate with each other, but Pods on the same node can. The CNI plugin is Calico. You check the Calico daemon sets and they are running. What is the most likely cause of the cross-node failure?

Keep studying — Troubleshooting