Services and Networking

Which of the following service types exposes a service on a static port on each node's IP address?

You have a Service named 'my-service' in namespace 'ns1'. Another pod in namespace 'ns2' needs to resolve 'my-service' using DNS. What FQDN should the pod use?

An Ingress resource is created with the following spec: spec: rules: - host: example.com http: paths: - path: /api pathType: Prefix backend: service: name: api-service port: number: 80 The backend service 'api-service' is in the same namespace as the Ingress. What must be true for the Ingress to route traffic to the service?

A pod cannot resolve a service DNS name. The cluster uses CoreDNS. Which of the following is the most likely cause if the pod's /etc/resolv.conf contains 'nameserver 10.96.0.10' and the CoreDNS pod is running?

You have a headless service named 'my-headless' with clusterIP: None. A pod in the same namespace queries the DNS name 'my-headless'. What will the DNS response contain?

You have three pods selected by a service. One pod is in 'CrashLoopBackOff' state. How does the service's endpoints behave?

Which THREE components are part of the Gateway API resource model? (Select THREE)

Which TWO network plugins (CNI) are commonly used in Kubernetes clusters? (Select TWO)

Which of the following Service types exposes a Service on a static port on each node's IP address?

You want to debug a Service that is not reachable. Which kubectl command can you use to forward a local port to a pod in the Service?

A NetworkPolicy named 'deny-all' has only a podSelector matching all pods and no rules. What is the effect?

You want to expose an application running in the cluster on a public IP address. Which Service type should you use?

You have an Ingress resource with the following spec: spec: rules: - host: example.com http: paths: - path: /api pathType: Prefix backend: service: name: api-service port: number: 80 A client sends a request to http://example.com/api/v1/users. Which path is matched?

You want to configure NetworkPolicy to allow ingress traffic only from pods with label 'role: frontend' in the same namespace. Which podSelector should be in the ingress rule?

You update a NetworkPolicy to add an egress rule. After applying, pods affected by the policy can no longer reach external IPs. What is the most likely reason?

Which TWO of the following are valid ways to expose a Service externally? (Select TWO.)

An administrator runs `kubectl port-forward service/my-svc 8080:80`. What does this command do?

What is the default kube-proxy mode in modern Kubernetes clusters?

A NetworkPolicy allows ingress from pods with label 'role: frontend'. Which field is used to select those pods?

What is the DNS name for a Service named 'api' in the 'default' namespace?

You have a kube-proxy running in ipvs mode. Which of the following is true about IPVS?

Which DNS record type does Kubernetes use to resolve a Service's ClusterIP?

Which component is responsible for implementing the NetworkPolicy rules?

A developer runs 'kubectl port-forward service/my-svc 8080:80' and reports that connections to localhost:8080 fail. The service is a ClusterIP service that selects pods with label 'app: my-app'. What is the most likely cause?

You apply the following NetworkPolicy to namespace 'ns1': apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: name: deny-ingress spec: podSelector: {} policyTypes: - Ingress ingress: [] What effect does this policy have?

Which kube-proxy mode uses iptables rules to handle service traffic?

You have a Deployment with 3 replicas. You create a headless service (clusterIP: None) with a label selector. Which of the following is true about DNS resolution for this service?

Which of the following is a valid CNI plugin for Kubernetes networking?

Which command forwards local port 8080 to port 80 of a pod named 'web-pod'?

Which kubectl command correctly retrieves the list of EndpointSlices for a Service named 'my-svc' in the 'default' namespace?

Which THREE components are required for a pod to resolve a Service DNS name?

Which TWO of the following are valid ways to isolate a set of pods from all ingress traffic except from monitoring pods?

Which annotation is commonly used with ExternalDNS to specify the DNS hostname for a Service?

A NetworkPolicy with podSelector: {} and policyTypes: [Ingress] is applied to a namespace. What is the effect on pods in that namespace?

You create a Service with clusterIP: None. What is this called and what is its purpose?

What is the default DNS name for a Service named 'my-service' in namespace 'my-ns'?

You run `kubectl port-forward service/my-svc 8080:80`. What does this command do?

What is the purpose of a Headless Service (clusterIP: None)?

A NetworkPolicy named 'default-deny-ingress' is applied to all pods in a namespace. The policy has no rules. An administrator then creates a new NetworkPolicy that allows ingress traffic to pods with label 'app: web' from any source using a podSelector with '{}'. Will traffic be allowed to pods labeled 'app: web'?

You want to expose a Deployment named 'web' on port 80 internally within the cluster. Which command creates a ClusterIP Service?

You need to create a Service that exposes port 80 on each node's IP at a static port (30080). Which Service type should you use?

You run: kubectl expose deployment web --port=80 --target-port=8080 --type=LoadBalancer --name=web-svc. What is the effect of this command?

You need to expose multiple HTTP services on a single IP address with path-based routing. Which resource should you use?

Which of the following is the default DNS name for a Service named 'api' in namespace 'production'?

You apply the following NetworkPolicy: apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: name: deny-all spec: podSelector: {} policyTypes: - Ingress What effect does this policy have?

You have a NodePort service. Which kube-proxy mode allows for better performance and more sophisticated load balancing algorithms like 'least connection'?

Which THREE statements about NetworkPolicy are correct?

Which THREE of the following are CNI plugins?