CKA Services and Networking Practice Question
Which Service type is used to expose a service externally with a cloud provider's load balancer?
⚠ Common exam trap
A common mix-up: candidates confuse NodePort with LoadBalancer, thinking NodePort alone provides external access via a cloud load balancer, but NodePort only opens a port on the node's IP and requires manual setup of an external load balancer or DNS to be truly accessible from the internet.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
LoadBalancer
The LoadBalancer service type provisions an external load balancer from the underlying cloud provider (e.g., AWS ELB, GCP TCP/UDP Load Balancer, Azure Load Balancer) and assigns a public IP or DNS name to route external traffic to the Kubernetes service. It is the only built-in service type that directly integrates with a cloud provider's infrastructure to expose a service externally with a managed load balancer.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
NodePort
Why it's wrong here
While NodePort exposes the service externally by opening a specific port (range 30000-32767) on all cluster nodes, it does not automatically provision an external load balancer. Traffic must be manually routed to the node IPs, making it less suitable for production environments requiring high availability and automated traffic distribution.
- ✗
ClusterIP
Why it's wrong here
ClusterIP is the default Kubernetes service type that allocates a stable, internal-only IP address to the service. This makes the service accessible solely from within the Kubernetes cluster, preventing any direct external access from the public internet or external clients.
- ✓
LoadBalancer
Why this is correct
Correct. The LoadBalancer service type integrates with cloud providers to automatically provision a physical or virtual load balancer in your cloud infrastructure. This external load balancer receives public traffic and forwards it to the underlying NodePort and ClusterIP configurations automatically created by Kubernetes.
- ✗
ExternalName
Why it's wrong here
ExternalName is a special service type that acts as a local alias for an external DNS name by returning a CNAME record. It does not define any selectors, proxy traffic, or expose cluster workloads to external clients; instead, it directs internal pods to external resources.
Go deeper
Related to this question
Learn chapter
Kubernetes Architecture Overview
Key term
ClusterIP NodePort LoadBalancer
ClusterIP, NodePort, and LoadBalancer are three types of Kubernetes Services that control how traffic reaches your application pods inside the cluster or from outside.
Key term
Ingress Resources
Ingress Resources are Kubernetes API objects that manage external access to services inside a cluster, typically HTTP and HTTPS traffic, by defining rules for routing requests based on hostnames and paths.
About these practice questions
Courseiva writes every CKA question from scratch — 726 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CKA practice question is part of Courseiva's free CNCF certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CKA exam.