KCNA Networking & Service Discovery 4

Question 1

In a NetworkPolicy, what does an empty podSelector ({}) in the spec mean?

Accepted Answer

All pods in the namespace are selected

Answer

An empty podSelector matches all pods in the namespace where the NetworkPolicy is defined, applying the policy to every pod there.

Question 2

Which Kubernetes object defines layer 7 (HTTP/HTTPS) routing rules for external access to cluster services?

Accepted Answer

Ingress

Answer

Ingress resources define HTTP and HTTPS routing rules, host-based routing, and TLS termination for externally accessible services.

Question 3

What is an EndpointSlice in Kubernetes?

Accepted Answer

A scalable group of network endpoints representing a subset of a Service's backends

Answer

EndpointSlices replaced Endpoints for scalability, grouping backend pod IPs and ports into slices of up to 100 entries per slice.

Question 4

Which kube-proxy mode uses Linux kernel's IPVS (IP Virtual Server) for load balancing?

Accepted Answer

ipvs mode

Answer

IPVS mode in kube-proxy uses the kernel's IPVS framework, which offers better performance and more load balancing algorithms than iptables for large clusters.

Question 5

What does the 'externalTrafficPolicy: Local' setting on a NodePort or LoadBalancer Service do?

Accepted Answer

Preserves the client's source IP and only routes to pods on the receiving node

Answer

With Local policy, kube-proxy only forwards to pods on the same node that received the traffic, preserving the original client IP but potentially causing uneven load distribution.

(KCNA) Kubernetes and Cloud Native Associate Practice Test

(KCNA) Kubernetes and Cloud Native Associate Practice Test

KCNA Networking & Service Discovery 4