Kcna Kubernetes And Cloud Native Associate · Free Practice Question Medium
Question 45
You are a Security Engineer responsible for maintaining the security of a cloud-native application deployed on Kubernetes. Your company has a policy that requires zero-trust networking. Which of the following options should you implement to align with this policy?
-
A
Disable network policies to make the system more accessible
-
B
Use NetworkPolicies to restrict pod-to-pod communication
-
C
Deploy all pods to the default namespace
-
D
Enable unrestricted inter-namespace communication
Reveal correct answer
Correct answer: B
A.
Disabling network policies would make the system less secure, contradicting the zero-trust networking policy.
B.
Using NetworkPolicies to restrict pod-to-pod communication aligns with the zero-trust networking model by limiting which pods can talk to each other.
C.
Deploying all pods to the default namespace does not address the need for zero-trust networking.
D.
Enabling unrestricted inter-namespace communication would violate the principles of zero-trust networking.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
