Certified Kubernetes Security Specialist (CKS)
Domain 5Objective 3
Minimize External Access to the Network CKS Practice Questions (Page 2)
Part of the System Hardening domain, which accounts for 10% of the CKS exam. Linux Foundation does not publish an official question count, but from its 120-minute exam (~50–80 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 10 practice questions to prepare you well beyond it. (estimate)
10questions here
2free pages
6concepts
10%of the exam
Questions 6–10
- 6
Which command can be used to test connectivity from a pod to another pod when verifying NetworkPolicies?
Select an answer first - 7
Which of the following is a valid selector type used in a NetworkPolicy rule?
Select an answer first - 8
Which NetworkPolicy selector is used to control traffic between namespaces?
Select an answer first - 9
After applying a NetworkPolicy that allows ingress to the 'api' pods only from the 'frontend' pods, a security analyst wants to verify that the policy is working. Which command should they use to test connectivity from a denied source?
Select an answer first - 10
In a NetworkPolicy, what does an `ingress` rule specify?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
No more pagesBack to CKS
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “CKS” is a trademark of its owner, used for identification only.