Networking KCNA Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A security team is implementing NetworkPolicies in a cluster. They have a 'web' pod that needs to accept traffic from a 'public' pod on port 80 and from a 'monitoring' pod on port 8080. They also need to allow the 'web' pod to send traffic to a 'database' pod on port 5432. What is the minimal set of NetworkPolicies required?

   • ATwo NetworkPolicies: one for ingress rules and one for egress rules.
   • BThree NetworkPolicies: one for each traffic direction and destination.
   • COne NetworkPolicy that selects the 'web' pod and allows ingress from 'public' on port 80 and from 'monitoring' on port 8080, and egress to 'database' on port 5432.
   • DOne NetworkPolicy for ingress and a separate NetworkPolicy for egress, but the egress policy must be in the 'database' namespace.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A company exposes a web application via an Ingress. The Ingress routes traffic to a Service named 'web' in the 'default' namespace. They want to add TLS termination at the Ingress. What must they provide in the Ingress specification?

   • AThe certificate and private key directly in the Ingress YAML file.
   • BA Service of type LoadBalancer that handles TLS termination.
   • CA reference to a Secret that contains the TLS certificate and private key.
   • DA ConfigMap that contains the certificate and private key.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which component is responsible for implementing the rules defined in an Ingress resource?

   • AThe etcd database
   • BThe Ingress Controller
   • CThe kubelet
   • DThe kube-scheduler
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A team runs a stateful application with three replicas, each with a stable identity. They need to expose these replicas to other pods in the cluster using a stable DNS name that resolves to a specific replica. Which Kubernetes resource should they use?

   • AA headless Service with a selector that matches all three pods.
   • BAn ExternalName Service pointing to an external database.
   • CA NodePort Service that exposes the pods on a specific port on each node.
   • DA ClusterIP Service with a selector that matches all three pods.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the primary purpose of a Kubernetes Service?

   • ATo manage the lifecycle of pods
   • BTo store configuration data for applications
   • CTo provide persistent storage for pods
   • DTo provide a stable network endpoint for a set of pods
   Reveal Solution Discussion Select an answer first