A security team is reviewing the CNI plugin used in their Kubernetes cluster. They are concerned about the ability to enforce network segmentation and the security implications of the CNI configuration. Which CNI feature is most critical for implementing network segmentation?

Support for IP address management (IPAM).

Support for NetworkPolicy enforcement.

Kubernetes and Cloud Native Security Associate (KCSA)

Domain 4Objective 6

Connectivity KCSA Practice Questions (Page 6)

Part of the Platform Security domain, which accounts for 16% of the KCSA exam. Linux Foundation does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–10 in this domain), expect 1–1 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

7concepts

16%of the exam

Questions 26–26

26application · medium
A security team is reviewing the CNI plugin used in their Kubernetes cluster. They are concerned about the ability to enforce network segmentation and the security implications of the CNI configuration. Which CNI feature is most critical for implementing network segmentation?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to KCSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “KCSA” is a trademark of its owner, used for identification only.

Connectivity KCSA Practice Questions (Page 6)

Questions 26–26

A security team is reviewing the CNI plugin used in their Kubernetes cluster. They are concerned about the ability to enforce network segmentation and the security implications of the CNI configuration. Which CNI feature is most critical for implementing network segmentation?

Keep studying — Platform Security