KCNA Kubernetes Fundamentals Practice Question
Which THREE of the following are true about Kubernetes Namespaces?
⚠ Common exam trap
The exam often tests the distinction between cluster-scoped and namespaced resources, and the trap here is that candidates mistakenly think all Kubernetes resources are namespaced, when in fact Nodes, PersistentVolumes, and ClusterRoles are cluster-scoped.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
NetworkPolicy can be used to control traffic between pods in different namespaces
B is correct because NetworkPolicy resources can define ingress and egress rules that allow or deny traffic between pods based on labels, and these rules can explicitly target pods in other namespaces using the namespaceSelector field. This enables fine-grained network segmentation across namespace boundaries, which is a common requirement for multi-tenant clusters.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
PersistentVolumes are namespaced
Why it's wrong here
PersistentVolumes are cluster-scoped; PersistentVolumeClaims are namespaced.
- ✓
NetworkPolicy can be used to control traffic between pods in different namespaces
Why this is correct
NetworkPolicy can allow or deny traffic between namespaces when properly configured.
- ✗
Nodes are namespaced resources
Why it's wrong here
Nodes are cluster-scoped, not namespaced.
- ✓
You can apply ResourceQuota to limit resource consumption in a namespace
Why this is correct
ResourceQuota enforces aggregate resource limits per namespace.
- ✓
Namespaces are used to isolate resources like Pods and Services
Why this is correct
Namespaces provide logical isolation for names and objects.
Go deeper
Related to this question
Learn chapter
Kubernetes Overview and Core Components
Key term
ReplicaSet and Replication
A ReplicaSet ensures a specified number of identical pod instances are running at all times in Kubernetes, using replication to maintain availability and stability.
Key term
Namespaces
A Namespace in Kubernetes is a virtual cluster within a physical cluster that allows you to organize and isolate resources, like an apartment building with separate units for different tenants.
About these practice questions
One of 833 original KCNA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
4 more ways this is tested on KCNA
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Which THREE statements about Kubernetes Namespaces are correct?
easy- ✓ A.Namespaces provide a way to divide cluster resources between multiple users or teams.
- B.All Kubernetes resources must be created within a namespace.
- C.Namespaces provide network isolation by default.
- ✓ D.Deleting a namespace will delete all resources in it.
- ✓ E.Resource quotas can be applied to a namespace to limit total resource consumption.
Why A: Namespaces partition cluster resources into virtual sub-clusters, enabling multi-tenancy and resource isolation for different teams or users. Option D is correct because when a namespace is deleted, Kubernetes automatically removes all resources (e.g., Pods, Services) that belong to that namespace. Option E is incorrect: while resource quotas can be applied to namespaces, they are an optional feature and not an inherent property; the statement is misleading because quotas must be explicitly configured and do not limit all resource types (e.g., node resources).
Variation 2. Which TWO statements about Namespaces are correct?
medium- ✓ A.Namespaces provide a way to divide cluster resources among multiple users
- B.Namespaces act as a strong security boundary by default
- ✓ C.Namespaces help organize objects in a cluster
- D.Every resource must be created in a namespace
- E.Resources in different namespaces cannot communicate with each other
Why A: Namespaces in Kubernetes provide a mechanism for partitioning a single cluster into multiple virtual clusters, enabling resource quota management and access control for different users or teams. This allows administrators to divide cluster resources (like CPU, memory, and storage) among multiple users via ResourceQuotas and LimitRanges, without requiring separate physical clusters.
Variation 3. Which TWO statements about Namespaces are correct?
hard- ✓ A.Resource names must be unique within a namespace
- B.Namespaces provide network isolation by default
- C.All Kubernetes resources are namespaced
- ✓ D.Namespaces provide a way to divide cluster resources between multiple users
- E.You can delete a namespace without affecting the resources inside it
Why A: Kubernetes enforces that resource names must be unique within a namespace. This is a fundamental constraint: within a given namespace, you cannot have two resources of the same type (e.g., two Pods) with the same name. This uniqueness allows the API server to resolve resource references unambiguously when using namespaced resources.
Variation 4. Which TWO of the following statements about Kubernetes namespaces are true?
hard- A.Services in different namespaces cannot communicate with each other
- B.Every Kubernetes object must be created in a namespace
- ✓ C.Deleting a namespace will delete all objects in it
- ✓ D.Namespaces can be used to implement resource quotas
- E.Namespaces provide a way to divide cluster resources between multiple users
Why C: Deleting a namespace triggers cascading deletion of all objects within it. Option D is correct because resource quotas can be applied per namespace to limit aggregate resource consumption. Option E is not entirely accurate: namespaces provide logical isolation, but dividing cluster resources among multiple users requires additional mechanisms like RBAC and resource quotas. Without those, namespaces alone do not enforce resource division.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This KCNA practice question is part of Courseiva's free CNCF certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the KCNA exam.