Two allow rules overlap, and one matches a broader set of traffic than the other. How does Cilium evaluate them?

AOnly the narrower rule is honored

BThe broader rule suppresses the narrower rule

CTraffic matching the union of allow rules is allowed

DOverlapping rules cause the policy to be rejected

Related Questions

What is the default traffic posture for a Cilium-managed endpoint before any policy selects it?...

easy

Which policy enforcement mode disables policy enforcement on all endpoints even if rules select them...

easy

The first policy that selects an endpoint contains only an ingress section. What happens to that end...

medium

An administrator wants to intercept DNS cluster-wide without making endpoints enter default-deny mod...

medium

Which statement about nodeSelector in Cilium policy is correct?...

medium

View all Network Policy questions

Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy

Discussion

Be the first to share your understanding of this concept

⚠️ Discussion is for concept clarification only. Do not share or request actual exam questions or answers.