Discuss Docker DCA Exam Topic 4 Question 85

The Kubernetes yaml shown below describes a networkPolicy.

Will the networkPolicy BLOCK this trafftc?

Solution. a request issued from a pod bearing only the tier: frontend label, to a pod bearing the tier: backend label

AYes

BNo

Suggested Answer: A

The provided Kubernetes NetworkPolicy YAML configuration indicates that the policy applies to pods with the label tier: backend in the default namespace1. The ingress rule allows traffic from pods with the label tier: api1. Therefore, a request issued from a pod bearing only the tier: frontend label to a pod bearing the tier: backend label will be blocked by this networkPolicy1. This is because the networkPolicy does not have a rule allowing ingress from pods with the tier: frontend label1. For more information on Kubernetes NetworkPolicies, you can refer to the Kubernetes Documentation on Network Policies.

Get Premium DCA Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

25 comments · newest first

Xuan 10 months ago

Definitely a "No" on this one.

Kami 11 months ago

Wait, are we sure about that? Seems off.

Miesha 11 months ago

The policy allows traffic from frontend to backend.

Annabelle 11 months ago

I think it won't block it, actually.

Alyssa 11 months ago

Yes, it will block the traffic.

Vivan 12 months ago

I feel like this could go either way, but I lean towards it not blocking since there might be an allow rule somewhere.

Cecil 12 months ago

If the policy is correctly configured, it should block the traffic from frontend to backend.

Joesph 12 months ago

I'm not entirely sure, but I remember a similar question where traffic was blocked based on labels.

Lemuel 1 year ago

I think the networkPolicy is set to allow traffic only from specific labels, so it might block the request.

Nan 1 year ago

Ah, I see now. The policy is designed to block that specific traffic flow. I'm feeling more confident in my ability to interpret these Kubernetes network policies.

Terrilyn 1 year ago

I think I've got it! The 'not' clause is negating the 'tier: backend' label, so the policy will block traffic from pods with the 'tier: frontend' label to pods with the 'tier: backend' label.

Vernell 1 year ago

Okay, let me take a closer look at the policy. The 'podSelector' and 'ingress' sections seem to be the key parts to focus on.

Josephine 1 year ago

Hmm, this looks like a tricky one. I'll need to carefully analyze the networkPolicy definition to determine if it will block the traffic.

Regenia 1 year ago

I'm a bit confused by the 'not' clause in the 'ingress' section. Does that mean the policy will block the traffic or allow it?

Janey 1 year ago

This is straightforward. The 'syskm' privilege is for key management, so the correct answers are D and F.

Tresa 1 year ago

Hmm, this seems like a tricky one. I'll need to think carefully about the factors that make output-related pay impractical.

Paul 1 year ago

Hmm, this looks like a tricky one. I'll need to think through the index options carefully to determine the optimum index for this query.

Glendora 1 year ago

Pressing the '#' button after the codes could be worth a try, but I'm not sure if that's the best solution. I'll have to weigh the options.

Mari 2 years ago

The networkPolicy specifies that only pods with 'tier: backend' label can receive traffic from pods with 'tier: frontend' label, so I think it will BLOCK the traffic.

Stefany 2 years ago

I'm not sure, can someone explain why they think it will BLOCK or not?

Jovita 2 years ago

I disagree, I believe the networkPolicy will not BLOCK the traffic.

Mari 2 years ago

I think the networkPolicy will BLOCK the traffic.

Gracia 2 years ago

Marleen 2 years ago

A) Yes

Yasuko 2 years ago

Will the networkPolicy BLOCK this traffic?

Docker DCA Exam - Topic 4 Question 85 Discussion