Question 1
You need to block all inbound traffic to Pods in a namespace unless another NetworkPolicy explicitly allows it. Which policy establishes that baseline?
Correct Answer:
A NetworkPolicy that selects all Pods and defines policyTypes: ["Ingress"] with no ingress rules
Question 2
A team created one NetworkPolicy to allow traffic from namespace frontend and another to allow traffic from namespace monitoring. How does Kubernetes evaluate those policies for the same Pod?
Correct Answer:
The allowed traffic is the union of what all applicable policies permit
Question 3
A security engineer writes a NetworkPolicy, but traffic behavior in the cluster does not change at all. What is the most likely root cause?
Correct Answer:
The cluster uses a CNI plugin that does not enforce NetworkPolicy
Question 4
Which egress target is commonly blocked to reduce the risk of Pod access to cloud instance credentials on major cloud platforms?
Correct Answer:
169.254.169.254
Question 5
You want a policy that allows ingress only from Pods with label role=frontend in the same namespace. Which selector belongs inside the ingress rule?
Correct Answer:
podSelector
Question 1
Exam overview

About this Exam

Prepare with the CKS Practice Questions - CKS Certified Kubernetes Security Specialist Exam practice quiz. This question bank includes 100 questions covering kubernetes, namespace, ingress, security, and serviceaccount. Use it to review important concepts, identify knowledge gaps, and build confidence for the related exam, course, or assessment.

More details

Additional Information

CKS Practice Questions - CKS Certified Kubernetes Security Specialist Exam

This practice set contains 100 questions from the matching question bank and focuses on kubernetes, namespace, ingress, security, and serviceaccount. Work through each question carefully, review the provided solutions, and revisit topics that need more study before your next attempt.

This is an independent study resource intended for practice and review; it is not an official examination or an endorsement by any organization named in the title.

Quiz information

Frequently Asked Questions

The complete question count is available after full access is unlocked.
No fixed duration is currently configured for this quiz.
Question explanations are included where they are available in the quiz content, helping you review the reasoning after answering.
Yes. You can retake the practice test again as you continue studying during your available access period.
After your access is confirmed, you can continue into the complete practice exam from this quiz flow.
Unless explicitly stated otherwise, this page provides independent practice material for study and exam preparation and is not the official examination itself.
Keep studying

Related Questions