Networking Questions
Practice questions for Networking topic in Kubernetes and Cloud Native Associate. 24 questions covering this domain.
Which Kubernetes add-on commonly provides cluster DNS so Pods can resolve Service names?
A team wants a Service name inside the cluster to resolve to an external DNS hostname without proxying traffic through Kubernetes. Which Service type ...
Which standard is used by Kubernetes networking plugins to implement the cluster network model on nodes?
A web application Pod needs to be accessible outside the Kubernetes cluster without relying on a cloud provider load balancer. The cluster has NodePor...
A NetworkPolicy is applied in the payments namespace that selects all Pods and sets an empty ingress rule (`ingress: []`). What is the effect on traff...
A developer needs to access a Pod's application directly from their laptop for debugging without creating a Service. Which kubectl command establishes...
A frontend Pod has an egress policy allowing traffic to a backend namespace. The backend Pods are ingress isolated and do not allow traffic from front...
A namespace adds a default deny egress policy and then notices Pods cannot resolve DNS names. Why is that expected?
A security team wants to add one policy that allows traffic and a second policy that explicitly denies a subset of it. What should they expect from Ku...
An operator tries to expose a Service on NodePort 28080 and the API rejects it under default settings. Why?
An engineer writes a NetworkPolicy ipBlock using the cluster Pod CIDR to target in-cluster workloads. What is the main problem with that approach?
A namespace admin writes a NetworkPolicy with an empty podSelector to create a broad rule. Which Pods does that selector match?
A Pod in namespace default is assigned IP 10.0.1.5 and tries to reach a Service in the kube-system namespace. The Service name is metrics-server. What...
A cluster runs in a cloud VPC and is configured with a pod CIDR 10.0.0.0/8 and service CIDR 10.32.0.0/12. An external system needs to reach a Service ...
A Service has type LoadBalancer and allocates a cloud provider load balancer. When the cloud-controller-manager pod fails, which behavior occurs?
If a namespace has no NetworkPolicy objects at all, what is the default traffic behavior for Pods in that namespace?
A ClusterIP Service is created for a Deployment. A Pod in another namespace tries to reach the Service using its ClusterIP (10.32.5.10). The connectio...
A network policy denies all ingress traffic to Pods in a namespace. Pods in that namespace also need to resolve DNS (CoreDNS in kube-system). Will DNS...
A cluster admin creates several NetworkPolicy objects, but traffic behavior does not change at all. What is the most likely explanation?
A platform engineer wants a NetworkPolicy to allow traffic only to Pods in the payments namespace, but the API has no direct namespace name field. Wha...
Sign in to see all 24 questions
Create a free account to browse the questions included with the free plan.