Certified Kubernetes Security Specialist (CKS)
Domain 3Objective 3
Minimize External Access to the Network CKS Practice Questions (Page 3)
Part of the Cluster Hardening domain, which accounts for 15% of the CKS exam. Linux Foundation does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 2–3 from this objective — we provide 15 practice questions to prepare you well beyond it. (estimate)
15questions here
3free pages
9concepts
15%of the exam
Questions 11–15
- 11
A security engineer has applied a default-deny ingress NetworkPolicy to the 'production' namespace. To verify the policy is effective, which command should the engineer run from a pod in the 'production' namespace?
Select an answer first - 12
In a NetworkPolicy egress rule, which field is used to specify the destination of allowed traffic?
Select an answer first - 13
Which of the following can be specified as a destination in an egress rule's 'to' field?
Select an answer first - 14
Which command can be used to test connectivity between pods after applying NetworkPolicies?
Select an answer first - 15
Which NetworkPolicy selector is used to allow traffic from a specific namespace?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
No more pagesBack to CKS
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “CKS” is a trademark of its owner, used for identification only.