Networking KCNA Practice Questions (Page 6)

Questions 26–28

1. 26expert · hard

   A company runs a multi-tenant Kubernetes cluster. Each tenant has its own namespace. They want to expose each tenant's application via a single Ingress controller, but they need to ensure that each tenant can only manage their own Ingress resources. What is the best approach?

   • ACreate a single Ingress resource in the 'default' namespace with rules for all tenants.
   • BUse a Service of type LoadBalancer for each tenant instead of Ingress.
   • CCreate a separate Ingress controller for each tenant.
   • DCreate separate Ingress resources in each tenant's namespace, and configure the Ingress controller to watch all namespaces.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   In container networking, what is the primary purpose of a virtual network interface (veth pair) when connecting a container to the host?

   • ATo provide a direct physical connection between the container and the host's external network
   • BTo isolate the container's network stack completely from the host
   • CTo link the container's network namespace to the host's network namespace, allowing traffic to flow between them
   • DTo create a secure encrypted tunnel between the container and the host
   Reveal Solution Discussion Select an answer first
3. 28expert · hard

   A cluster administrator is choosing a CNI plugin for a production cluster. The requirements are: 1) support for NetworkPolicies, 2) high performance, and 3) ability to integrate with existing on-premises network infrastructure. Which CNI plugin is the best fit?

   • ACanal, because it combines Flannel and Calico.
   • BWeave Net, because it provides a simple overlay network.
   • CFlannel, because it is simple and uses VXLAN overlay.
   • DCalico, because it supports NetworkPolicies and can use BGP for integration with existing network infrastructure.
   Reveal Solution Discussion Select an answer first