What is a common method to verify that a NetworkPolicy is effective?

Attempt to connect from a pod that should be blocked and confirm the connection fails

Check the NetworkPolicy YAML for syntax errors

What is the purpose of using an ipBlock in an egress rule?

To allow traffic to specific external IP addresses or CIDR ranges

To allow traffic from specific external IP addresses

To select pods by their IP addresses

What is the purpose of a default-deny ingress NetworkPolicy?

To allow all inbound traffic to selected pods by default

To block all outbound traffic from selected pods

To block all inbound traffic to selected pods unless explicitly allowed by another policy

To restrict traffic between nodes in the cluster

Certified Kubernetes Security Specialist (CKS)

Domain 3Objective 3

Minimize External Access to the Network CKS Practice Questions (Page 1)

Part of the Cluster Hardening domain, which accounts for 15% of the CKS exam. Linux Foundation does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 2–3 from this objective — we provide 15 practice questions to prepare you well beyond it. (estimate)

15questions here

3free pages

9concepts

15%of the exam

Questions 1–5

1foundation · easy
Which field in a NetworkPolicy is used to select the pods to which the policy applies?
Select an answer first
2foundation · easy
What is a common method to verify that a NetworkPolicy is effective?
Select an answer first
3foundation · easy
Which Kubernetes resource is used to define rules that control ingress and egress traffic between pods in a cluster?
Select an answer first
4foundation · easy
What is the purpose of using an ipBlock in an egress rule?
Select an answer first
5foundation · easy
What is the purpose of a default-deny ingress NetworkPolicy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CKS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “CKS” is a trademark of its owner, used for identification only.

Minimize External Access to the Network CKS Practice Questions (Page 1)

Questions 1–5

Which field in a NetworkPolicy is used to select the pods to which the policy applies?

What is a common method to verify that a NetworkPolicy is effective?

Which Kubernetes resource is used to define rules that control ingress and egress traffic between pods in a cluster?

What is the purpose of using an ipBlock in an egress rule?

What is the purpose of a default-deny ingress NetworkPolicy?

Keep studying — Cluster Hardening