What is the primary method to verify that a NetworkPolicy is working as intended?

Check the NetworkPolicy status field

Check the network plugin logs for policy violations

Use `kubectl describe networkpolicy` to see if it is applied

Run connectivity tests from allowed and denied sources

What is the primary purpose of a Kubernetes NetworkPolicy?

To automatically block all traffic from pods that are not part of a specific deployment

To define firewall rules at the node level to control traffic between pods and external services

To restrict ingress and egress traffic to and from pods based on labels and selectors

To encrypt all traffic between pods and services in the cluster

Which NetworkPolicy rule would block all external traffic to a pod, while still allowing traffic from other pods?

ingress: - from: - ipBlock: cidr: 0.0.0.0/0

egress: - to: - podSelector: {}

ingress: - from: - podSelector: {}

ingress: - from: - namespaceSelector: {}

What is the effect of a default-deny NetworkPolicy that has no rules?

All ingress and egress traffic to and from the selected pods is blocked

Only traffic from other namespaces is blocked, but traffic within the same namespace is allowed

Traffic is blocked only if the pod has a specific label

All traffic is allowed because no rules are defined

Which of the following NetworkPolicy rules allows egress traffic only to pods with the label `app: database`?

egress: - to: - namespaceSelector: matchLabels: app: database

egress: - to: - podSelector: matchLabels: app: database

egress: - to: - ipBlock: cidr: 10.0.0.0/24

ingress: - from: - podSelector: matchLabels: app: database

Certified Kubernetes Security Specialist (CKS)

Domain 5Objective 3

Minimize External Access to the Network CKS Practice Questions (Page 1)

Part of the System Hardening domain, which accounts for 10% of the CKS exam. Linux Foundation does not publish an official question count, but from its 120-minute exam (~50–80 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 10 practice questions to prepare you well beyond it. (estimate)

10questions here

2free pages

6concepts

10%of the exam

Questions 1–5

1foundation · easy
What is the primary method to verify that a NetworkPolicy is working as intended?
Select an answer first
2foundation · easy
What is the primary purpose of a Kubernetes NetworkPolicy?
Select an answer first
3foundation · easy
Which NetworkPolicy rule would block all external traffic to a pod, while still allowing traffic from other pods?
Select an answer first
4foundation · easy
What is the effect of a default-deny NetworkPolicy that has no rules?
Select an answer first
5foundation · easy
Which of the following NetworkPolicy rules allows egress traffic only to pods with the label `app: database`?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CKS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “CKS” is a trademark of its owner, used for identification only.