Services and Networking

You need to create a Service that exposes port 80 on each node's IP at a static port (30080). Which Service type should you use?

A NetworkPolicy named 'default-deny-ingress' is applied to all pods in a namespace. The policy has no rules. An administrator then creates a new NetworkPolicy that allows ingress traffic to pods with label 'app: web' from any source using a podSelector with '{}'. Will traffic be allowed to pods labeled 'app: web'?

Which TWO of the following are valid ways to expose a Service externally? (Select TWO.)

Which THREE of the following are CNI plugins?

A NetworkPolicy allows ingress from pods with label 'role: frontend'. Which field is used to select those pods?

What is the default kube-proxy mode in modern Kubernetes clusters?

You apply the following NetworkPolicy to namespace 'ns1': apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: name: deny-ingress spec: podSelector: {} policyTypes: - Ingress ingress: [] What effect does this policy have?

What is the default DNS name for a Service named 'my-service' in namespace 'my-ns'?

What is the purpose of a Headless Service (clusterIP: None)?

You want to expose a Deployment named 'web' on port 80 internally within the cluster. Which command creates a ClusterIP Service?

Which of the following service types exposes a service on a static port on each node's IP address?

You want to configure NetworkPolicy to allow ingress traffic only from pods with label 'role: frontend' in the same namespace. Which podSelector should be in the ingress rule?

Which of the following Service types exposes a Service on a static port on each node's IP address?

You need to expose multiple HTTP services on a single IP address with path-based routing. Which resource should you use?

You update a NetworkPolicy to add an egress rule. After applying, pods affected by the policy can no longer reach external IPs. What is the most likely reason?

Which TWO of the following are valid ways to isolate a set of pods from all ingress traffic except from monitoring pods?

A pod cannot resolve a service DNS name. The cluster uses CoreDNS. Which of the following is the most likely cause if the pod's /etc/resolv.conf contains 'nameserver 10.96.0.10' and the CoreDNS pod is running?

You have a NodePort service. Which kube-proxy mode allows for better performance and more sophisticated load balancing algorithms like 'least connection'?

Which of the following is a valid CNI plugin for Kubernetes networking?

An administrator runs `kubectl port-forward service/my-svc 8080:80`. What does this command do?

Which kube-proxy mode uses iptables rules to handle service traffic?

You run `kubectl port-forward service/my-svc 8080:80`. What does this command do?

Which command forwards local port 8080 to port 80 of a pod named 'web-pod'?

A developer runs 'kubectl port-forward service/my-svc 8080:80' and reports that connections to localhost:8080 fail. The service is a ClusterIP service that selects pods with label 'app: my-app'. What is the most likely cause?

You have a headless service named 'my-headless' with clusterIP: None. A pod in the same namespace queries the DNS name 'my-headless'. What will the DNS response contain?

What is the DNS name for a Service named 'api' in the 'default' namespace?

You apply the following NetworkPolicy: apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: name: deny-all spec: podSelector: {} policyTypes: - Ingress What effect does this policy have?

You have an Ingress resource with the following spec: spec: rules: - host: example.com http: paths: - path: /api pathType: Prefix backend: service: name: api-service port: number: 80 A client sends a request to http://example.com/api/v1/users. Which path is matched?

An Ingress resource is created with the following spec: spec: rules: - host: example.com http: paths: - path: /api pathType: Prefix backend: service: name: api-service port: number: 80 The backend service 'api-service' is in the same namespace as the Ingress. What must be true for the Ingress to route traffic to the service?

Which THREE components are required for a pod to resolve a Service DNS name?

You have a kube-proxy running in ipvs mode. Which of the following is true about IPVS?

You have a Service named 'my-service' in namespace 'ns1'. Another pod in namespace 'ns2' needs to resolve 'my-service' using DNS. What FQDN should the pod use?

A NetworkPolicy named 'deny-all' has only a podSelector matching all pods and no rules. What is the effect?

Which component is responsible for implementing the NetworkPolicy rules?

You want to debug a Service that is not reachable. Which kubectl command can you use to forward a local port to a pod in the Service?

Which annotation is commonly used with ExternalDNS to specify the DNS hostname for a Service?

You create a Service with clusterIP: None. What is this called and what is its purpose?

Which of the following is the default DNS name for a Service named 'api' in namespace 'production'?

You want to expose an application running in the cluster on a public IP address. Which Service type should you use?

Which THREE components are part of the Gateway API resource model? (Select THREE)

You have three pods selected by a service. One pod is in 'CrashLoopBackOff' state. How does the service's endpoints behave?

Which kubectl command correctly retrieves the list of EndpointSlices for a Service named 'my-svc' in the 'default' namespace?

Which TWO network plugins (CNI) are commonly used in Kubernetes clusters? (Select TWO)

You run: kubectl expose deployment web --port=80 --target-port=8080 --type=LoadBalancer --name=web-svc. What is the effect of this command?

You have a Deployment with 3 replicas. You create a headless service (clusterIP: None) with a label selector. Which of the following is true about DNS resolution for this service?

Which DNS record type does Kubernetes use to resolve a Service's ClusterIP?

A NetworkPolicy with podSelector: {} and policyTypes: [Ingress] is applied to a namespace. What is the effect on pods in that namespace?

Which THREE statements about NetworkPolicy are correct?