Kcna Kubernetes And Cloud Native Associate · Free Practice Question Medium
Question 33
You are responsible for setting up networking in a Kubernetes cluster, with a special focus on security. Which of the following approaches would best satisfy your requirements? (Select two)
-
A
Use host networking for all pods.
-
B
Use NodePort services for all applications.
-
C
Deploy an Ingress Controller with no authentication.
-
D
Utilize Calico for Network Policies and routing.
-
E
Implement Network Policies to restrict traffic between pods.
Reveal correct answers
Correct answers: D, E
A.
Host networking removes the network isolation between the pod and the Kubernetes node, which could be a security risk.
B.
NodePort exposes your service on a static port on each node, which could be a security risk.
C.
An Ingress Controller without authentication exposes your services to the outside world without any security measures.
D.
Calico is a popular networking and network security solution for containers that supports a variety of networking options, including Network Policies for enhanced security.
E.
Network Policies allow you to define rules for how pods communicate with each other, providing an added layer of security.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
