KCNA Kubernetes Fundamentals Practice Question
A team wants a single stable IP address and DNS name that load-balances traffic across a changing set of backend Pods. The Pods are managed by a Deployment and are regularly replaced during rollouts. Which Kubernetes object should they create to provide this stable virtual IP and DNS entry?
⚠ Common exam trap
The trap here is assuming Ingress replaces a Service, when Ingress normally routes to a Service that provides the stable virtual IP.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
A Service of type ClusterIP
A Service abstracts a set of Pods behind a stable virtual IP and DNS name, and its label selector keeps the backend list current as Pods come and go. ClusterIP is the default type and is ideal for internal access. Ingress, NetworkPolicy, and ConfigMap serve routing, security, and configuration purposes respectively, and none of them supplies a stable virtual IP for a dynamic Pod set.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
A NetworkPolicy
Why it's wrong here
NetworkPolicy controls which Pods may communicate with each other by allowing or denying traffic, but it does not provide any address, DNS name, or load balancing. Creating one would only affect reachability rules and would not give clients a stable endpoint. It is orthogonal to the requirement and cannot replace a Service.
- ✗
A ConfigMap
Why it's wrong here
ConfigMaps store non-confidential configuration data as key-value pairs for consumption by Pods. They have no networking role, no IP allocation, and no DNS registration. Using a ConfigMap cannot provide stable addressing or distribute traffic among Pods. This option confuses configuration storage with service discovery and load balancing.
- ✗
An Ingress resource
Why it's wrong here
Ingress provides HTTP and HTTPS routing rules and typically requires an Ingress controller plus a backing Service. It does not itself assign a stable virtual IP to Pods or perform transport-layer load balancing. While it can expose applications externally, it does not fulfill the core need of a stable internal virtual IP and DNS name for a changing Pod set.
- ✓
A Service of type ClusterIP
Why this is correct
A ClusterIP Service is assigned a stable virtual IP and a DNS name, and it selects backend Pods by label. As Pods are created or deleted during rollouts, the Service's Endpoints or EndpointSlices are updated, so clients keep using the same address. This directly meets the requirement for stable load-balanced access to a dynamic Pod set.
Go deeper
Related to this question
About these practice questions
This KCNA question is part of Courseiva's 930-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official CNCF exam blueprint
This KCNA practice question is part of Courseiva's free CNCF certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the KCNA exam.