Use Kubernetes Architecture, Networking, Storage, Service Mesh, and Helm VCAP-VCF-VKS Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which Kubernetes resource provides a stable virtual IP address and DNS name to load-balance traffic across a set of pods?

   • APod
   • BService
   • CNetworkPolicy
   • DIngress
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company has implemented a service mesh (Linkerd) in its Kubernetes cluster. The operations team wants to view metrics such as request volume, success rate, and latency percentiles for each service in the mesh. Which component of the service mesh provides this functionality?

   • AThe control plane, which manages the configuration of the proxies.
   • BThe Kubernetes API server, which stores the state of the cluster.
   • CThe observability plane, which collects and aggregates telemetry data from the sidecar proxies.
   • DThe data plane, which is responsible for forwarding traffic between services.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   In Helm, what is the name of the packaged application that is installed into a Kubernetes cluster?

   • AChart
   • BManifest
   • CRelease
   • DRepository
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A company has implemented a service mesh (Istio) to manage traffic between microservices. They have a service 'payment' that is called by 'checkout'. The team wants to enforce a policy that only allows 'checkout' to call 'payment' and denies all other services. Additionally, they want to ensure that the traffic is encrypted with mTLS. Which two Istio resources should the team configure?

   • AA NetworkPolicy that allows traffic from 'checkout' to 'payment', and a ServiceEntry that enables mTLS.
   • BAn AuthorizationPolicy that allows traffic from 'checkout' to 'payment', and a PeerAuthentication policy that enables mTLS.
   • CA Gateway that exposes 'payment' only to 'checkout', and a Sidecar resource that enables mTLS.
   • DA VirtualService that routes traffic from 'checkout' to 'payment', and a DestinationRule that enables mTLS.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   In a service mesh, what is the purpose of a sidecar proxy?

   • ATo schedule pods on worker nodes
   • BTo intercept and manage network traffic to and from a service
   • CTo provide persistent storage for the service
   • DTo store configuration data for the service
   Reveal Solution Discussion Select an answer first