Courseiva
Container OrchestrationhardMultiple ChoiceObjective-mapped

KCNA Container Orchestration Practice Question

When using a Service of type ClusterIP, how do pods reach the service?

⚠ Common exam trap

CNCF often tests the misconception that ClusterIP Services are only reachable from within the same pod or node, when in fact they are reachable from any pod in the cluster (across nodes) via the cluster IP, thanks to kube-proxy's distributed routing rules.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Via the service's cluster IP and port

A Service of type ClusterIP exposes a stable virtual IP (the cluster IP) and port within the cluster. Pods reach the Service by sending traffic to this cluster IP and port, which is then load-balanced by kube-proxy (using iptables, IPVS, or eBPF rules) to one of the backing pod endpoints. This is the default and most fundamental Service type in Kubernetes.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Via the service's cluster IP and port

    Why this is correct

    Pods connect to the service's cluster IP and port, which kube-proxy forwards to healthy pods.

  • Via the node's IP address and a high port

    Why it's wrong here

    NodePort services expose on node IP and high port, but ClusterIP is internal only.

  • Via an external load balancer

    Why it's wrong here

    External load balancers are used with LoadBalancer services, not ClusterIP.

  • Directly via the pod's IP address

    Why it's wrong here

    Pod IPs are ephemeral and not stable; services abstract away pod IPs.

About these practice questions

One of 833 original KCNA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This KCNA practice question is part of Courseiva's free CNCF certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the KCNA exam.