KCNA Kubernetes Fundamentals Practice Question
Which Kubernetes resource provides stable network endpoints for a set of pods, enabling service discovery and load balancing?
⚠ Common exam trap
CNCF often tests the misconception that Ingress provides load balancing and stable endpoints directly to pods, when in fact Ingress only routes external traffic to a Service, which is the actual resource providing those capabilities.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Service
A Service is the correct Kubernetes resource because it provides a stable virtual IP (ClusterIP) and DNS name that persists independently of pod lifecycles, enabling reliable service discovery and client-side load balancing across a set of pods selected by labels. This abstraction decouples clients from ephemeral pod IPs, ensuring traffic is routed to healthy pods via kube-proxy and iptables/IPVS rules.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Service
Why this is correct
A Service supplies a stable virtual IP and DNS name that front a dynamic set of pod IPs, distributing traffic across matching ready pods. This decouples clients from pod churn, delivering service discovery and load balancing.
- ✗
NetworkPolicy
Why it's wrong here
NetworkPolicy is a firewall construct controlling which pods may communicate, filtering ingress and egress traffic; it neither assigns endpoints nor balances load. It is tempting because its name suggests inbound traffic handling, yet the resource that supplies a stable virtual IP and distributes connections across a pod set is the Service.
- ✗
Ingress
Why it's wrong here
Ingress routes external HTTP and HTTPS traffic to services, operating at layer 7; it does not assign stable cluster-internal endpoints or perform service discovery. It is tempting because Ingress does reference Services as backends, but the resource providing stable virtual IPs and load balancing across pods is the Service.
- ✗
EndpointSlice
Why it's wrong here
EndpointSlice is a scalability API that splits a Service's backing endpoints into smaller groups for kube-proxy; it is generated by the Service controller and does not itself provide discovery or load balancing. It is tempting because it lists pod IPs, but the Service remains the stable endpoint abstraction.
Go deeper
Related to this question
About these practice questions
One of 930 original KCNA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This KCNA practice question is part of Courseiva's free CNCF certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the KCNA exam.