Network Security KCSA Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   In a NetworkPolicy, what does an `ingress` rule control?

   • ATraffic leaving the selected pods to other destinations.
   • BTraffic between nodes in the cluster.
   • CTraffic to the Kubernetes API server.
   • DTraffic coming into the selected pods from other sources.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is a key security implication of the default flat network model in Kubernetes?

   • AAll pods are automatically isolated from each other.
   • BAny pod can communicate with any other pod unless network policies are applied.
   • CExternal traffic is blocked by default.
   • DPods cannot communicate across namespaces.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   How are NetworkPolicies enforced in a Kubernetes cluster?

   • ABy the kube-proxy component.
   • BBy the API server.
   • CBy the kubelet on each node.
   • DBy the CNI plugin that supports NetworkPolicy.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is a 'default-deny' NetworkPolicy?

   • AA policy that is automatically applied to all namespaces.
   • BA policy that denies all traffic to and from a pod unless explicitly allowed by another policy.
   • CA policy that only applies to external traffic.
   • DA policy that allows all traffic by default but can be overridden.
   Reveal Solution Discussion Select an answer first
6. 5application · easy

   A security consultant is explaining the default network behavior in Kubernetes to a new client. The client is concerned about the flat network model and wants to understand the implications for isolation. Which statement accurately describes the default behavior?

   • APods can only communicate with other pods on the same node by default.
   • BPods can only communicate with other pods that have the same labels by default.
   • CPods in different namespaces cannot communicate with each other by default.
   • DAll pods can communicate with each other by default, regardless of the node they are running on.
   Reveal Solution Discussion Select an answer first