An administrator wants to intercept DNS cluster-wide without making endpoints enter default-deny mode. Which setting enables that pattern?

ASet policyEnforcementMode to always

BSet enableDefaultDeny ingress and egress to false on the policy

CUse nodeSelector instead of endpointSelector

DDisable Hubble Relay

Related Questions

What is the default traffic posture for a Cilium-managed endpoint before any policy selects it?...

easy

Which policy enforcement mode disables policy enforcement on all endpoints even if rules select them...

easy

The first policy that selects an endpoint contains only an ingress section. What happens to that end...

medium

Which statement about nodeSelector in Cilium policy is correct?...

medium

Two allow rules overlap, and one matches a broader set of traffic than the other. How does Cilium ev...

medium

View all Network Policy questions

Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy

Discussion

Be the first to share your understanding of this concept

⚠️ Discussion is for concept clarification only. Do not share or request actual exam questions or answers.