Skip to content
CCA
Network Policy
hard
Question 2 of 36

An operator wants denied egress from pods to fail fast instead of timing out. What is the documented way to do that?

ASet policyEnforcementMode to always only
BEnable policy-deny-response=icmp and allow ICMP ingress so the notification can return
CDisable kube-proxy replacement
DSwitch to Kubernetes NetworkPolicy only

Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy

Discussion

Be the first to share your understanding of this concept

⚠️ Discussion is for concept clarification only. Do not share or request actual exam questions or answers.

Sign in to join the discussion