KubeProxy KCSA Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A DevOps team is troubleshooting why a Service of type ClusterIP is not reachable from pods on other nodes. They verify that the Service endpoints are correct and that the kubelet is healthy. Which component's role is most directly responsible for making the ClusterIP reachable across nodes?

   • Akubelet, which manages the pod lifecycle and ensures that pods are running on the correct node.
   • BCoreDNS, which provides service discovery by resolving Service names to ClusterIPs.
   • Ckube-controller-manager, which runs controllers that reconcile the desired state of the cluster.
   • Dkube-proxy, which programs the node's networking rules to forward traffic destined to the ClusterIP to the Service's endpoints.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which kube-proxy mode uses the kernel's IPVS module to provide load balancing and supports more scheduling algorithms than iptables?

   • Aiptables
   • Bnftables
   • Cuserspace
   • DIPVS
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which kube-proxy mode uses a userspace proxy process to handle service traffic and was the default in early Kubernetes versions?

   • Anftables
   • Buserspace
   • CIPVS
   • Diptables
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A developer is debugging why a Service is not reachable from a pod on the same node. They check the Service and Endpoints and they are correct. What should they check next to determine if kube-proxy is functioning correctly?

   • ACheck the kubelet logs to see if the pod is running on the correct node.
   • BCheck the CoreDNS configuration to ensure the Service name resolves correctly.
   • CCheck the kube-proxy logs for errors and verify that the iptables rules for the Service exist.
   • DCheck the API server logs to see if the Service object was created successfully.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A developer is confused about why a Service of type NodePort is accessible from outside the cluster. They ask the administrator to explain the role of kube-proxy in this scenario. Which explanation is accurate?

   • Akube-proxy programs iptables rules that forward traffic from the NodePort to the Service's ClusterIP, which then load balances to the backend pods.
   • Bkube-proxy opens the NodePort on the node's firewall and forwards traffic directly to the pod's IP address.
   • Ckube-proxy creates a DNS record for the NodePort that resolves to the node's IP address, allowing external clients to connect.
   • Dkube-proxy runs a userspace proxy on the NodePort that accepts connections and proxies them to the backend pods.
   Reveal Solution Discussion Select an answer first