An Ingress is configured to route traffic to a backend service. The security team wants to ensure that the backend service only receives HTTPS traffic from the Ingress controller. What is the correct way to configure this?

Use the 'nginx.ingress.kubernetes.io/backend-protocol: HTTPS' annotation on the Ingress.

Set the 'tls' field in the Ingress spec to include the backend service.

Configure the backend service to only listen on port 443.

Create a NetworkPolicy that blocks HTTP traffic to the backend service.

What is the effect of setting PeerAuthentication mode to STRICT in Istio?

All traffic to the workload must use mTLS

Traffic can be plaintext or mTLS

Which field in a NetworkPolicy allows you to select source namespaces for ingress traffic?

spec.podSelector.namespaceSelector

spec.egress.to.namespaceSelector

spec.ingress.from.namespaceSelector

Certified Kubernetes Security Specialist (CKS)

Domain 1Objective 2

Network Security CKS Practice Questions (Page 1)

Part of the Cluster Setup domain, which accounts for 15% of the CKS exam. Linux Foundation does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 2–3 from this objective — we provide 20 practice questions to prepare you well beyond it. (estimate)

20questions here

4free pages

11concepts

15%of the exam

Questions 1–5

1application · medium
An Ingress is configured to route traffic to a backend service. The security team wants to ensure that the backend service only receives HTTPS traffic from the Ingress controller. What is the correct way to configure this?
Select an answer first
2foundation · easy
What are the required keys in a Kubernetes Secret used for TLS termination in an Ingress?
Select an answer first
3foundation · easy
What is the effect of setting PeerAuthentication mode to STRICT in Istio?
Select an answer first
4foundation · easy
Which field in a NetworkPolicy allows you to select source namespaces for ingress traffic?
Select an answer first
5foundation · easy
What is the correct type for a Secret that stores a TLS certificate and key for an Ingress?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CKS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “CKS” is a trademark of its owner, used for identification only.

Network Security CKS Practice Questions (Page 1)

Questions 1–5

An Ingress is configured to route traffic to a backend service. The security team wants to ensure that the backend service only receives HTTPS traffic from the Ingress controller. What is the correct way to configure this?

What are the required keys in a Kubernetes Secret used for TLS termination in an Ingress?

What is the effect of setting PeerAuthentication mode to STRICT in Istio?

Which field in a NetworkPolicy allows you to select source namespaces for ingress traffic?

What is the correct type for a Secret that stores a TLS certificate and key for an Ingress?

Keep studying — Cluster Setup