KCNA Kubernetes Fundamentals Practice Question
Which THREE statements about Kubernetes Services are correct?
⚠ Common exam trap
A common mistake is to assume that a Service can select Pods from any namespace, but in Kubernetes, a Service's label selector only matches Pods within the same namespace. Additionally, the default Service type is ClusterIP, not NodePort.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
A Service provides a stable IP address and DNS name for a set of Pods.
A is correct because a Kubernetes Service provides a stable virtual IP address and a DNS name (via CoreDNS) that remains constant even as the underlying Pods are created, destroyed, or scaled. This decouples clients from the ephemeral nature of Pod IPs, ensuring reliable connectivity.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
A Service provides a stable IP address and DNS name for a set of Pods.
Why this is correct
Services provide stable endpoints that decouple clients from individual Pod IPs.
- ✓
Services use label selectors to identify the target Pods.
Why this is correct
Services use label selectors to determine which Pods receive traffic.
- ✓
A Service of type LoadBalancer can be used to expose an application externally.
Why this is correct
A LoadBalancer Service provisions an external IP address via the cloud provider’s load balancer controller, making the application reachable from outside the cluster. This satisfies the stem’s constraint that a Service can expose an application externally, as opposed to ClusterIP, which restricts access to internal cluster traffic only.
- ✗
A Service can only route traffic to Pods within the same namespace.
Why it's wrong here
Services can route to Pods in any namespace if the selector matches (though cross-namespace routing is typically not recommended, it is possible by specifying the namespace in the selector? Actually, Services are namespaced and can only select Pods in the same namespace. So this option is false because selector is namespace-scoped.)
- ✗
The default Service type is NodePort.
Why it's wrong here
The default Service type is ClusterIP, not NodePort.
Go deeper
Related to this question
Learn chapter
Kubernetes Overview and Core Components
Key term
Kubernetes API Primitives
Kubernetes API Primitives are the basic building blocks that the Kubernetes API uses to represent and manage the state of a cluster, such as Pods, Services, Deployments, and Namespaces.
Key term
ReplicaSet and Replication
A ReplicaSet ensures a specified number of identical pod instances are running at all times in Kubernetes, using replication to maintain availability and stability.
About these practice questions
This KCNA question is part of Courseiva's 833-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
2 more ways this is tested on KCNA
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Which TWO statements about Kubernetes Services are correct?
medium- A.A Service can only route traffic to Pods in the same namespace
- B.A Service can only be of type ClusterIP
- C.A Service automatically scales Pods based on load
- ✓ D.A Service provides a stable IP address for Pods
- ✓ E.A Service uses selectors to identify target Pods
Why D: A Kubernetes Service provides a stable virtual IP address that remains constant even as the underlying Pods are created, destroyed, or rescheduled. This decouples clients from the ephemeral nature of Pod IPs, ensuring reliable connectivity within the cluster.
Variation 2. Which TWO statements about Kubernetes Services are correct?
medium- A.A Service can expose only one container port
- B.A Service can only route traffic to pods on the same node as the Service
- ✓ C.The default Service type is ClusterIP
- ✓ D.A Service provides a stable IP address and DNS name for a set of pods
- E.A Service of type NodePort exposes the service only on the node where the pod is running
Why C: The default Service type in Kubernetes is ClusterIP, which exposes the Service on a cluster-internal IP address. This means the Service is only reachable from within the cluster, providing a stable internal endpoint for pod-to-pod communication without external exposure.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This KCNA practice question is part of Courseiva's free CNCF certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the KCNA exam.