CKA Networking 3

Question 1

Which kube-proxy mode uses Linux iptables rules to implement Service load balancing?

Accepted Answer

iptables

Answer

In iptables mode, kube-proxy writes DNAT rules to redirect ClusterIP traffic to a random Pod endpoint.

Question 2

An Ingress resource requires which cluster component to actually route HTTP traffic?

Accepted Answer

An Ingress controller

Answer

An Ingress resource is only a configuration object; an Ingress controller (e.g., nginx-ingress, Traefik) must be deployed to act on it.

Question 3

Which DNS record type does a headless Service (clusterIP: None) return for Pod lookups?

Accepted Answer

A records for each individual Pod IP

Answer

A headless Service returns individual A records for each Pod IP, enabling clients to discover all endpoints directly.

Question 4

What does the `externalTrafficPolicy: Local` setting on a LoadBalancer Service do?

Accepted Answer

Preserves the client source IP and only routes to local node Pods

Answer

With Local policy, kube-proxy only forwards external traffic to Pods on the same node, preserving the original client IP without SNAT.

Question 5

A NetworkPolicy egress rule with an empty `to: []` field means:

Accepted Answer

Egress to all destinations is denied

Answer

An egress rule with no `to` entries (empty list) matches no destination, effectively blocking all egress when combined with a policyTypes: [Egress] selection.

(CKA) Certified Kubernetes Administrator Practice Test

(CKA) Certified Kubernetes Administrator Practice Test

CKA Networking 3