KCNA Networking & Service Discovery 3

Question 1

Which CNI plugin feature allows enforcement of NetworkPolicy objects?

Accepted Answer

Network policy enforcement by the CNI plugin

Answer

NetworkPolicy enforcement requires a CNI plugin that supports it (e.g., Calico, Cilium, Weave); the base CNI spec handles IP assignment and routing but not policy.

Question 2

What is the default behavior for pod-to-pod communication when NO NetworkPolicy is applied?

Accepted Answer

All traffic is allowed between all pods

Answer

Without any NetworkPolicy, Kubernetes allows all pod-to-pod communication across the entire cluster by default.

Question 3

Which Ingress feature allows routing different URL paths to different backend Services?

Accepted Answer

Path-based routing

Answer

Ingress path rules let you map HTTP paths like /api to one Service and /static to another Service within the same Ingress resource.

Question 4

What is the role of CoreDNS in a Kubernetes cluster?

Accepted Answer

Provides DNS resolution for Service and pod names within the cluster

Answer

CoreDNS runs as a Deployment in the cluster and serves DNS queries, resolving Service names and pod hostnames to their respective IP addresses.

Question 5

A Service of type ExternalName maps to what kind of resource?

Accepted Answer

A CNAME record pointing to an external DNS name

Answer

ExternalName Services create a DNS CNAME record that aliases the Service name to an external hostname, enabling cluster-internal resolution of external services.

(KCNA) Kubernetes and Cloud Native Associate Practice Test

(KCNA) Kubernetes and Cloud Native Associate Practice Test

KCNA Networking & Service Discovery 3