CKA Networking 2

Question 1

Which Kubernetes resource defines a stable virtual IP address that load-balances traffic to a set of Pods?

Accepted Answer

Service

Answer

A Service provides a stable ClusterIP virtual address that kube-proxy routes to the matching Pod endpoints.

Question 2

What is the default behavior of a NetworkPolicy when it first selects a Pod?

Accepted Answer

All ingress to the Pod is denied; egress is unchanged

Answer

Applying any NetworkPolicy that selects a Pod immediately blocks all ingress to that Pod; egress is only restricted when an egress rule is also present.

Question 3

Which Service type provisions an external load balancer from the cloud provider?

Accepted Answer

LoadBalancer

Answer

A Service of type LoadBalancer triggers the cloud controller manager to allocate an external LB with a public IP.

Question 4

What CNI plugin feature is required for enforcing Kubernetes NetworkPolicies?

Accepted Answer

Network policy enforcement support

Answer

NetworkPolicy enforcement is not built into Kubernetes itself; the CNI plugin (e.g., Calico, Cilium) must support and implement it.

Question 5

Which field in a Service spec selects the backend Pods that the Service routes traffic to?

Accepted Answer

matchLabels under selector

Answer

The Service's spec.selector map matches Pod labels to build the Endpoints/EndpointSlices that receive traffic.

(CKA) Certified Kubernetes Administrator Practice Test

(CKA) Certified Kubernetes Administrator Practice Test

CKA Networking 2