Match each Kubernetes networking concept to its description.
Drag a concept onto its matching description — or click a concept then click the description.
Default service type; exposes service on a cluster-internal IP
Exposes service on each node's IP at a static port
Exposes service externally using a cloud provider's load balancer
Service without a cluster IP; used for direct pod-to-pod communication
Implements traffic routing rules defined by Ingress resources
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
ClusterIP: Exposes the Service on a cluster-internal IP. Only reachable from within the cluster.
Common confusions arise between ClusterIP (internal-only) and NodePort (node-level external access), and between LoadBalancer (cloud-integrated external LB) and Ingress (HTTP routing with rules).
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
ClusterIP: Exposes the Service on a cluster-internal IP. Only reachable from within the cluster.
Why this is correct
ClusterIP is the default service type, providing a virtual IP accessible only inside the cluster.
NodePort: Exposes the Service on each Node's IP at a static port.
Why this is correct
NodePort extends ClusterIP by making the service accessible on each node's IP at a specific port (30000-32767).
LoadBalancer: Exposes the Service externally using a cloud provider's load balancer.
Why this is correct
LoadBalancer provisions an external load balancer to route traffic to the service, often on cloud platforms.
Ingress: Manages external access to Services, typically HTTP, with rules for routing.
Why this is correct
Ingress is a resource that provides HTTP/HTTPS routing and load balancing, often using an Ingress controller.
ClusterIP: Exposes the Service on each Node's IP at a static port.
Why it's wrong here
Incorrect — this describes NodePort, not ClusterIP.
NodePort: Exposes the Service on a cluster-internal IP.
Why it's wrong here
Incorrect — this describes ClusterIP, not NodePort.
Go deeper
About these practice questions
One of 833 original KCNA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This KCNA practice question is part of Courseiva's free CNCF certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the KCNA exam.