Courseiva
Container OrchestrationmediumMultiple SelectObjective-mapped

KCNA Container Orchestration Practice Question

Which TWO of the following are valid ways to expose a set of pods as a network service in Kubernetes?

⚠ Common exam trap

The KCNA exam often tests the misconception that Ingress or NetworkPolicy can directly expose pods as a network service, but Ingress requires a Service backend and NetworkPolicy only controls traffic, not exposure.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Service of type NodePort

A Service of type NodePort exposes a set of pods on a static port on each node's IP address, making the service accessible from outside the cluster. This is a valid Kubernetes resource for exposing pods as a network service, as it creates a mapping from a node port to the ClusterIP and then to the target pods.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Service of type NodePort

    Why this is correct

    NodePort exposes the service on each node's IP at a static port.

  • NetworkPolicy

    Why it's wrong here

    NetworkPolicy controls traffic, does not expose services.

  • Service of type ClusterIP

    Why this is correct

    ClusterIP exposes the service on a cluster-internal IP.

  • Ingress resource

    Why it's wrong here

    Ingress provides HTTP routing, not a direct service endpoint for protocols other than HTTP.

  • Deployment with replicas

    Why it's wrong here

    Deployment does not expose a network endpoint.

About these practice questions

This KCNA question is part of Courseiva's 833-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This KCNA practice question is part of Courseiva's free CNCF certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the KCNA exam.