Network Security KCSA Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the role of network plugins (CNI) in network segmentation?

   • AThey replace the need for namespaces.
   • BThey provide the underlying networking capabilities and may enforce network policies.
   • CThey automatically segment all pods into separate networks.
   • DThey only handle DNS resolution for pods.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Why is implementing a default-deny policy considered a security best practice?

   • AIt automatically blocks all external traffic.
   • BIt reduces the risk of unauthorized communication by only allowing explicitly permitted traffic.
   • CIt simplifies network troubleshooting.
   • DIt ensures that all traffic is encrypted.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which of the following is a common strategy for segmenting Kubernetes networks?

   • AUsing the same namespace for all workloads to simplify management.
   • BUsing Kubernetes namespaces to logically separate workloads.
   • CDisabling the CNI plugin to prevent communication.
   • DAssigning each pod a static IP address.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the primary security benefit of implementing network isolation and segmentation in a Kubernetes cluster?

   • AIt automatically encrypts all traffic between pods.
   • BIt eliminates the need for authentication and authorization mechanisms.
   • CIt guarantees that all pods are protected from external attacks.
   • DIt reduces the attack surface by limiting the paths an attacker can use to move laterally within the cluster.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which NetworkPolicy selector is used to specify traffic from a particular IP range?

   • AnamespaceSelector
   • BipBlock
   • ClabelSelector
   • DpodSelector
   Reveal Solution Discussion Select an answer first