U.S. Independence Day Deal! Unlock 25% OFF Today – Limited-Time Offer - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Linux Foundation CKS Exam - Topic 1 Question 33 Discussion

Cluster:qa-cluster Master node:masterWorker node:worker1 You can switch the cluster/configuration context using the following command: [desk@cli] $kubectl config use-context qa-cluster Task: Create a NetworkPolicy namedrestricted-policyto restrict access to Podproductrunning in namespacedev. Only allow the following Pods to connect to Pod products-service: 1. Pods in the namespaceqa 2. Pods with labelenvironment: stage, in any namespace
A) Explanation:

Linux Foundation CKS Exam - Topic 1 Question 33 Discussion

Actual exam question for Linux Foundation's CKS exam
Question #: 33
Topic #: 1
[All CKS Questions]

Cluster:qa-cluster Master node:masterWorker node:worker1 You can switch the cluster/configuration context using the following command: [desk@cli] $kubectl config use-context qa-cluster Task: Create a NetworkPolicy namedrestricted-policyto restrict access to Podproductrunning in namespacedev. Only allow the following Pods to connect to Pod products-service: 1. Pods in the namespaceqa 2. Pods with labelenvironment: stage, in any namespace

Show Suggested Answer Hide Answer
Suggested Answer: A

by Celeste at Feb 26, 2023, 04:42 AM

Limited Time Offer

25%

Off

Get Premium CKS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Jovita
7 months ago
But what if we need to allow more Pods later? Seems too strict.
upvoted 0 times
...
Edison
8 months ago
I think restricting access like this is a good security practice.
upvoted 0 times
...
Jordan
8 months ago
Wait, does this mean Pods in other namespaces can't connect at all?
upvoted 0 times
...
Alpha
8 months ago
Totally agree, that command is essential for managing multiple clusters!
upvoted 0 times
...
Oretha
8 months ago
Just a reminder, the command to switch context is `kubectl config use-context qa-cluster`.
upvoted 0 times
...
Joanna
8 months ago
I think we can use the `podSelector` and `namespaceSelector` for this task, but I’m not 100% confident about how to combine them for the labels.
upvoted 0 times
...
Blossom
8 months ago
I feel a bit confused about the order of the rules in the NetworkPolicy. Do we need to define the ingress and egress separately?
upvoted 0 times
...
Ayesha
8 months ago
This question seems similar to one we did in class about restricting access based on labels. I think I need to recall how to specify the pod selectors correctly.
upvoted 0 times
...
Shenika
9 months ago
I remember we practiced creating NetworkPolicies, but I'm not entirely sure about the syntax for allowing specific namespaces and labels.
upvoted 0 times
...
Casie
9 months ago
Hmm, this looks like a Snowflake-specific question. I'll need to think carefully about the different ways to interact with a stage and directory in Snowflake.
upvoted 0 times
...
Isreal
9 months ago
Hmm, this is a tricky one. I'll need to carefully review the information about Commvault IntelliSnap and NetApp SnapCenter to determine how they handle SQL Server transaction logs.
upvoted 0 times
...
Alline
9 months ago
Hmm, I'm a bit unsure about this one. The different code segments seem similar, but I need to make sure I understand the nuances of how each one handles the error. Let me re-read the question and options closely.
upvoted 0 times
...
Dante
9 months ago
Hmm, I'm a bit unsure about this one. I know SSH is used for secure remote access, but I can't remember the default port off the top of my head. I'll have to think this through carefully.
upvoted 0 times
...
Natalie
9 months ago
Hmm, this is an interesting question. I'll need to think carefully about the different options and what a rotating pattern could apply to.
upvoted 0 times
...
Heike
1 year ago
This question is a piece of cake! Option B is the way to go. Now, where's the coffee machine in this testing center?
upvoted 0 times
...
Benton
1 year ago
I was a bit confused at first, but after reading through the options, B is the clear winner. Time to move on to the next question!
upvoted 0 times
...
Hubert
1 year ago
Haha, I bet the exam writers were feeling pretty clever with this one. But option B is the way to go, no doubt about it.
upvoted 0 times
Delisa
12 months ago
Yeah, option B is the most logical and secure choice for creating the NetworkPolicy.
upvoted 0 times
...
Francisca
1 year ago
The exam writers did try to make it tricky, but option B stands out as the correct answer.
upvoted 0 times
...
Sharmaine
1 year ago
I agree, option B covers all the requirements perfectly.
upvoted 0 times
...
Elfriede
1 year ago
Option B is definitely the best choice for this scenario.
upvoted 0 times
...
...
Xochitl
1 year ago
Option B seems to be the correct answer. The question clearly states the requirements, and that's what the NetworkPolicy in option B is addressing.
upvoted 0 times
Bettye
1 year ago
Yes, option B aligns perfectly with the conditions mentioned in the task. It's the most suitable solution.
upvoted 0 times
...
Theola
1 year ago
I agree, option B is the best choice for creating the NetworkPolicy to restrict access as per the given criteria.
upvoted 0 times
...
Carman
1 year ago
Option B is indeed the correct answer. It meets the requirements specified in the question.
upvoted 0 times
...
...
Joye
1 year ago
This looks straightforward, I'll go with option B. Restricting access to the 'products-service' Pod based on the specified criteria.
upvoted 0 times
...
Ashleigh
1 year ago
I feel confident about this, I have practiced similar scenarios.
upvoted 0 times
...
Janna
1 year ago
I agree, it requires a good understanding of NetworkPolicy.
upvoted 0 times
...
Brandon
1 year ago
I think this question is tricky.
upvoted 0 times
...

Save Cancel