Use the Gateway API to Manage Ingress Traffic CKA Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   Your organization is adopting the Gateway API to replace a legacy Ingress controller. The platform team wants to define a reusable traffic entry point that can be shared across multiple application teams, while allowing each team to manage its own routing rules independently. The platform team creates a GatewayClass and a Gateway with a listener on port 443. Which resource should each application team create to define their own routing rules without modifying the shared Gateway?

   • AAn Ingress resource with the same hostname as the Gateway listener
   • BA NetworkPolicy that allows traffic from the Gateway to their application's pods
   • CA second Gateway resource with the same listener configuration, dedicated to their application
   • DAn HTTPRoute resource that references the shared Gateway via its gatewayRef field
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the primary function of an HTTPRoute resource in the Gateway API?

   • ATo define routing rules for HTTP traffic to backend services
   • BTo expose a set of pods as a network service
   • CTo define the network listeners (ports and protocols) that a Gateway exposes
   • DTo specify the controller that manages Gateways
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A platform team wants to enforce that all HTTP traffic to a Gateway must use HTTPS. They configure a listener on port 443 with TLS. They also want to redirect any HTTP traffic on port 80 to HTTPS. What is the correct way to achieve this with the Gateway API?

   • AConfigure the listener on port 80 with protocol HTTPS and no TLS
   • BUse an Ingress resource to handle the HTTP to HTTPS redirect
   • CConfigure a second listener on port 80 with protocol HTTP and an HTTPRoute that redirects to the HTTPS listener
   • DConfigure the listener on port 443 with a 'redirect' field set to true
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   In a Gateway resource, what does a 'listener' define?

   • AThe backend services that traffic should be forwarded to
   • BThe routing rules for matching HTTP requests
   • CThe port, protocol, and hostname(s) on which the Gateway accepts traffic
   • DThe controller that will manage the Gateway
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   Your organization currently uses Ingress with a single IngressClass. You are planning a migration to the Gateway API. A key requirement is that application teams must be able to define routing rules for their own namespaces without needing permissions to modify cluster-scoped resources. Which migration approach best satisfies this requirement?

   • ACreate a GatewayClass and Gateway as cluster-admin, then delegate HTTPRoute creation to application teams in their namespaces
   • BMigrate each Ingress resource to an HTTPRoute and keep the IngressClass for backward compatibility
   • CCreate a single Gateway per namespace and grant teams permissions to modify it
   • DUse the Ingress API with a new IngressClass that supports Gateway API features
   Reveal Solution Discussion Select an answer first