In a Kubernetes NetworkPolicy, what does the `ingress` field define?

Rules for traffic between pods in the same namespace

Rules for traffic to external services

Rules for traffic entering the pod

Rules for traffic leaving the pod

A company is adopting a service mesh to secure service-to-service communication. They want to ensure that only services with the correct identity can communicate. Which service mesh feature should they configure?

Ingress gateway with TLS termination.

Mutual TLS (mTLS) with strict mode.

AuthorizationPolicy with a deny-all rule.

NetworkPolicy with pod selectors.

Which of the following is a DNS-based attack that could be mitigated by securing DNS resolution in a cluster?

Man-in-the-middle attack on HTTP

What is the goal of network segmentation in a Kubernetes cluster?

To isolate workloads and limit lateral movement in case of a breach

To improve performance by reducing network latency

To reduce the number of IP addresses needed

Which of the following is required for a Kubernetes NetworkPolicy to be enforced?

The cluster must be running on a cloud provider's managed Kubernetes service

The cluster must have a service mesh installed

All pods must be in the same namespace

The CNI plugin must support NetworkPolicy enforcement

Kubernetes and Cloud Native Security Associate (KCSA)

Domain 4Objective 6

Connectivity KCSA Practice Questions (Page 2)

Part of the Platform Security domain, which accounts for 16% of the KCSA exam. Linux Foundation does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–10 in this domain), expect 1–1 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

7concepts

16%of the exam

Questions 6–10

6foundation · easy
In a Kubernetes NetworkPolicy, what does the `ingress` field define?
Select an answer first
7application · medium
A company is adopting a service mesh to secure service-to-service communication. They want to ensure that only services with the correct identity can communicate. Which service mesh feature should they configure?
Select an answer first
8foundation · easy
Which of the following is a DNS-based attack that could be mitigated by securing DNS resolution in a cluster?
Select an answer first
9foundation · easy
What is the goal of network segmentation in a Kubernetes cluster?
Select an answer first
10foundation · easy
Which of the following is required for a Kubernetes NetworkPolicy to be enforced?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to KCSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “KCSA” is a trademark of its owner, used for identification only.