Linux Foundation CKS Exam - Topic 1 Question 36 Discussion

Actual exam question for Linux Foundation's CKS exam

Question #: 36
Topic #: 1

[All CKS Questions]

Task

Create a NetworkPolicy named pod-access to restrict access to Pod users-service running in namespace dev-team.

Only allow the following Pods to connect to Pod users-service:

AExplanation:

Show Suggested Answer

Suggested Answer: A

by Chantell at Apr 21, 2023, 07:17 PM

Limited Time Offer

25%

Off

Get Premium CKS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Vernice

8 months ago

Yeah, but isn't it a bit overkill for a small team?

upvoted 0 times

...

Tyra

8 months ago

I think we also need to consider egress rules too.

upvoted 0 times

...

Daniel

9 months ago

Wait, can we really restrict access like that? Sounds tricky.

upvoted 0 times

...

Suzi

9 months ago

Totally agree, it's essential for security!

upvoted 0 times

...

Maddie

9 months ago

Just need to specify the podSelector in the NetworkPolicy.

upvoted 0 times

...

Shaun

9 months ago

I think we should use the `podSelector` to restrict access, but I can't recall if we need to include any specific ports or protocols.

upvoted 0 times

...

Bernardo

9 months ago

I feel like I might confuse the namespace settings. Do we need to specify the namespace in the NetworkPolicy?

upvoted 0 times

...

Renea

10 months ago

I remember practicing a similar question where we had to set up ingress rules. I hope this one is just as straightforward!

upvoted 0 times

...

Lai

10 months ago

I think we need to define the pod selector correctly to match the allowed Pods, but I'm not entirely sure about the syntax.

upvoted 0 times

...

Tawanna

10 months ago

Hmm, this seems straightforward. I'd go with HttpSession objects and a database to store the cart items.

upvoted 0 times

...

Billye

10 months ago

Analytics Builder could be a good choice, but I'm not as familiar with that tool. I'll need to review the capabilities of option C to see if it fits the requirements.

upvoted 0 times

...

Carri

1 year ago

This is a piece of cake. I'll just copy the YAML from the images and call it a day.

upvoted 0 times

...

Bettyann

1 year ago

Ha! I bet the correct answer is the one with the most options. That's usually how these exams work.

upvoted 0 times

Alba

1 year ago

User 3: Let's go with that then.

upvoted 0 times

...

Whitney

1 year ago

User 2: Yeah, that's a common strategy in exams.

upvoted 0 times

...

Rickie

1 year ago

User 1: I think the correct answer is the one with the most options.

upvoted 0 times

...

Alease

1 year ago

Wait, do I have to specify the namespace for the allowed Pods? That's not very clear in the question.

upvoted 0 times

Bobbie

1 year ago

Once you set up the NetworkPolicy with the correct namespaceSelector, only the specified Pods will be able to connect to users-service.

upvoted 0 times

...

Franklyn

1 year ago

Make sure to define the namespace in the 'namespaceSelector' to restrict access to the Pod users-service in the dev-team namespace.

upvoted 0 times

...

Cristina

1 year ago

You can use the 'namespaceSelector' field in the NetworkPolicy to specify the namespace.

upvoted 0 times

...

Romana

1 year ago

Yes, you need to specify the namespace for the allowed Pods.

upvoted 0 times

...

Jerrod

1 year ago

That's the right approach to restrict access to the Pod users-service in the dev-team namespace.

upvoted 0 times

...

Curt

1 year ago

Got it, I will make sure to include the 'namespaceSelector' field in the NetworkPolicy.

upvoted 0 times

...

Rodney

1 year ago

The NetworkPolicy should restrict access to the users-service Pod only for the specified Pods in the same namespace.

upvoted 0 times

...

Karan

1 year ago

You can use the 'namespaceSelector' field in the NetworkPolicy to specify the namespace.

upvoted 0 times

...

Gilbert

1 year ago

Yes, you need to specify the namespace for the allowed Pods.

upvoted 0 times

...

Wei

1 year ago

Make sure to define the NetworkPolicy with the correct namespace for the allowed Pods to connect to users-service.

upvoted 0 times

...

Elena

1 year ago

Yes, you need to specify the namespace for the allowed Pods. It should be in the same namespace as the users-service Pod.

upvoted 0 times

...

Cordelia

1 year ago

Okay, this looks straightforward. The NetworkPolicy should only allow the specified Pods to connect to the users-service.

upvoted 0 times

...

Chana

1 year ago

I believe using labels and selectors is key to restricting access.

upvoted 0 times

...

Joaquin

1 year ago

I agree, setting up NetworkPolicy can be tricky.

upvoted 0 times

...

Lashanda

1 year ago

I think the task is challenging.

upvoted 0 times

...