EX280 Networking And Network Policies Practice Question
An OpenShift administrator needs to restrict access so that pods in namespace 'dev' cannot initiate any outbound connections to pods in namespace 'secure-db'. Which resource should be created in namespace 'secure-db' to achieve this?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
A NetworkPolicy with an empty ingress rule set in namespace 'secure-db'
A NetworkPolicy with ingress rules applied in the destination namespace ('secure-db') controls which sources are allowed to connect to it.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
A NetworkPolicy with an empty ingress rule set in namespace 'secure-db'
Why this is correct
A NetworkPolicy in 'secure-db' selecting pods with an empty ingress array denies all incoming traffic from other namespaces unless explicitly allowed.
- ✗
A NetworkPolicy blocking egress in namespace 'dev'
Why it's wrong here
While egress can be blocked in 'dev', the question asks for a policy protecting 'secure-db' or standard ingress control.
- ✗
A ClusterNetwork policy blocking all cross-namespace traffic cluster-wide
Why it's wrong here
ClusterNetwork does not handle fine-grained namespace-to-namespace traffic isolation like NetworkPolicy.
- ✗
An EgressFirewall object in namespace 'dev'
Why it's wrong here
EgressFirewall controls traffic leaving a namespace to external CIDRs or other namespaces, but NetworkPolicy is the standard namespaced resource for ingress/egress rules.
About these practice questions
Courseiva writes every EX280 question from scratch — 509 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Red Hat exam blueprint
This EX280 practice question is part of Courseiva's free Red Hat certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the EX280 exam.