Linux_FoundationLinux_Foundation
KCNA · Question #7
KCNA Question #7: Real Exam Question with Answer & Explanation
The correct answer is D: Network Policies. To control specific traffic flows for workloads in Kubernetes, the CNI plugin must support Network Policies.
Submitted by katya_ua· May 4, 2026Kubernetes Fundamentals
Question
What feature must a CNI support to control specific traffic flows for workloads running in Kubernetes?
Options
- ABorder Gateway Protocol
- BBorder Gateway Protocol
- CPod Security Policy
- DNetwork Policies
Explanation
To control specific traffic flows for workloads in Kubernetes, the CNI plugin must support Network Policies.
Common mistakes.
- A. Border Gateway Protocol (BGP) is a routing protocol primarily used for routing between autonomous systems on the internet, or sometimes within a large cluster for advanced routing, but it's not the feature that directly enables Kubernetes Network Policies.
- B. Border Gateway Protocol (BGP) is a routing protocol primarily used for routing between autonomous systems on the internet, or sometimes within a large cluster for advanced routing, but it's not the feature that directly enables Kubernetes Network Policies.
- C. Pod Security Policy (PSP) controls security aspects of Pod creation and updates, such as privileged containers or host path access, not specific network traffic flows.
Concept tested. CNI and Network Policies
Reference. https://kubernetes.io/docs/concepts/services-networking/network-policies/
Topics
#Kubernetes Networking#Network Policies#CNI#Network Security
Community Discussion
No community discussion yet for this question.