KCSA Kubernetes Security Fundamentals Practice Question
You want to write a NetworkPolicy that allows backend pods to communicate with an external database located outside the cluster at IP address '203.0.113.50'. Which NetworkPolicy section must you configure?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
egress with an ipBlock matching '203.0.113.50/32'
To control traffic leaving the pod to external IPs or destinations outside the pod network, you must configure 'egress' rules with a 'ipBlock'.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
ingress with a namespaceSelector matching the external network
Why it's wrong here
Ingress controls incoming traffic, and namespace selectors only apply to cluster namespaces.
- ✗
ExternalName service mapped to an egress policy
Why it's wrong here
ExternalName services are DNS CNAME mappings and do not configure network policy rules.
- ✓
egress with an ipBlock matching '203.0.113.50/32'
Why this is correct
Egress rules control outgoing traffic, and ipBlock allows specifying external CIDR ranges.
- ✗
policyTypes set to ["Ingress"] with externalIPs
Why it's wrong here
Ingress does not control outgoing traffic to external IPs.
About these practice questions
Courseiva writes every KCSA question from scratch — 320 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official CNCF / Linux Foundation exam blueprint
This KCSA practice question is part of Courseiva's free CNCF / Linux Foundation certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the KCSA exam.