Linux Foundation Exam CKS Topic 1 Question 52 Discussion

Actual exam question for Linux Foundation's CKS exam

Question #: 52
Topic #: 1

Context

A default-deny NetworkPolicy avoids to accidentally expose a Pod in a namespace that doesn't have any other NetworkPolicy defined.

Task

Create a new default-deny NetworkPolicy named defaultdeny in the namespace testing for all traffic of type Egress.

The new NetworkPolicy must deny all Egress traffic in the namespace testing.

Apply the newly created default-deny NetworkPolicy to all Pods running in namespace testing.

AExplanation:

Show Suggested Answer

Suggested Answer: A

by Yong at Apr 20, 2024, 02:12 PM

Limited Time Offer

25%

Off

Get Premium CKS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Vanda

6 months ago

Candidate 2: This kind of policy helps in creating a more secure environment by blocking potentially harmful outgoing connections.

upvoted 0 times

...

Jessenia

6 months ago

Candidate 1: Exactly, it's about controlling and restricting Egress traffic to enhance security measures in the cluster.

upvoted 0 times

...

Pearlene

6 months ago

Candidate 4: The rationale behind this is to ensure that any Pod in the namespace testing does not have any unwanted outgoing traffic.

upvoted 0 times

...

Leeann

7 months ago

Candidate 3: I believe applying the default-deny NetworkPolicy to all Pods running in namespace testing is crucial for security.

upvoted 0 times

...

Luisa

7 months ago

Candidate 2: I agree, the new NetworkPolicy must deny all Egress traffic in the namespace testing to avoid any accidental exposure.

upvoted 0 times

...

Marva

7 months ago

Candidate 1: I think the question is straightforward, we need to create a default-deny NetworkPolicy named defaultdeny in the namespace testing for all Egress traffic.

upvoted 0 times

...

Angella

8 months ago

Yes, and apply the new NetworkPolicy to all Pods running in the namespace testing.

upvoted 0 times

...

Leonardo

8 months ago

Sure, we need to deny all Egress traffic in the namespace testing.

upvoted 0 times

...

Enola

8 months ago

Let's create a new default-deny NetworkPolicy named defaultdeny in the namespace testing.

upvoted 0 times

...