DCA Question #66: Real Exam Question with Answer & Explanation

Question

The Kubernetes yaml shown below describes a networkPolicy. Will the networkPolicy BLOCK this traffic? Solution: a request issued from a pod lacking the tier: api label, to a pod bearing the tier: backend label

Options

• AYes
• BNo

Explanation

The NetworkPolicy will BLOCK traffic from a pod lacking the tier: api label to a pod bearing the tier: backend label.

Common mistakes.

• B. If the traffic were not blocked, the NetworkPolicy would either not apply to the tier: backend pod, or its ingress rules would explicitly allow traffic from any pod, or specifically from pods that lack the tier: api label.

Concept tested. Kubernetes NetworkPolicy ingress selection

Reference. https://kubernetes.io/docs/concepts/services-networking/network-policies/#the-networkpolicy-resource

No community discussion yet for this question.