Kubernetes Container Orchestration Networking Services 3

Question 1

In a NetworkPolicy, what happens to pods that have no NetworkPolicy selecting them?

Accepted Answer

All ingress and egress are allowed

Answer

By default, pods not selected by any NetworkPolicy are non-isolated and accept all incoming and outgoing traffic.

Question 2

Which CNI plugin is known for enforcing NetworkPolicy and using eBPF for high-performance networking?

Accepted Answer

Cilium

Answer

Cilium uses eBPF to implement networking and security policies at the kernel level, offering high throughput and fine-grained NetworkPolicy enforcement.

Question 3

What does the podSelector field in a NetworkPolicy's spec select?

Accepted Answer

The pods in the same namespace that the policy applies to

Answer

The spec.podSelector field selects the group of pods within the policy's namespace to which the NetworkPolicy rules apply.

Question 4

A NetworkPolicy with an empty podSelector ({}) applies to which pods in the namespace?

Accepted Answer

All pods in the namespace

Answer

An empty podSelector matches all pods in the namespace, making the policy's rules apply cluster-wide within that namespace.

Question 5

Which NetworkPolicy policyType would you specify to restrict outbound traffic from selected pods?

Accepted Answer

Egress

Answer

Setting policyTypes to include Egress in a NetworkPolicy allows you to define rules that restrict or permit outgoing traffic from the selected pods.

Kubernetes Container Orchestration Practice Test

Kubernetes Container Orchestration Practice Test

Kubernetes Container Orchestration Networking Services 3