Understand Connectivity Between Pods CKA Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A cluster has a default-deny NetworkPolicy in the 'prod' namespace. A new application is deployed with Pods labeled 'app: web'. The application needs to: 1) receive traffic from Pods labeled 'app: frontend', 2) send traffic to a database Service named 'db' in the same namespace, and 3) receive traffic from monitoring tools in the 'monitoring' namespace. The team creates a NetworkPolicy that selects 'app: web' and includes the following rules: ingress from 'app: frontend', ingress from 'monitoring' namespace, and egress to the 'db' Service. Which requirement is NOT met?

   • AReceiving traffic from 'app: frontend'
   • BSending traffic to the 'db' Service
   • CAll requirements are met
   • DReceiving traffic from the 'monitoring' namespace
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is the role of an Ingress controller in Kubernetes?

   • ATo manage DNS records for Services.
   • BTo encrypt traffic between Pods.
   • CTo implement the rules defined in Ingress resources and route traffic to Services.
   • DTo provide a stable IP address for Pods.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the primary purpose of a Kubernetes Service?

   • ATo encrypt traffic between Pods.
   • BTo provide a stable IP address and DNS name for a set of Pods.
   • CTo assign a unique IP address to each container in a Pod.
   • DTo provide load balancing only for external traffic.
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A team has a StatefulSet with three replicas of a database. They want each Pod to have a stable network identity so that clients can connect to a specific replica. They also want a stable DNS name for the StatefulSet as a whole. What should they do?

   • ACreate a NodePort Service and use the node IPs.
   • BCreate an ExternalName Service pointing to the Pod IPs.
   • CCreate a ClusterIP Service and use the Service's ClusterIP.
   • DCreate a headless Service and use the Pod DNS names.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A Pod runs two containers: a web server and a log shipper. The web server writes logs to a file, and the log shipper needs to read that file. How can the log shipper access the web server's log file?

   • AThey must use a shared volume mounted into both containers.
   • BThe log shipper can directly read the web server's file system.
   • CThey share the same network namespace, so the log shipper can access the web server via localhost.
   • DThe log shipper must use a Service to access the web server's file.
   Reveal Solution Discussion Select an answer first