Practice Test 2 | Google Cloud Certified Professional Cloud Security Engineer | Dumps | Mock Test
A customer has different applications running as pods on Kubernetes Engine. You have been asked to restrict communications so that pods can only communicate with other pods in the same namespace and cannot communicate with pods in other namespaces.
How can this be achieved?
A. Create and apply a network policy .
B. Create and apply a PodSecurityPolicy.
C. Create an ingress firewall rule to restrict traffic into the namespace.
D. Create an egress firewall rule to restrict traffic out of the namespace.
Correct Answer: A
- Option A is CORRECT. A network policy in Kubernetes is used to restrict inter-pod communications.
- Option B is incorrect. The PodSecurityPolicy (PSP) is used to validate any requests to create or update pods in the cluster that meet set conditions.
- Option C is incorrect. Firewall rules are network-level filters and do not work at the pod level.
- Option D is incorrect. Firewall rules are network-level filters and do not work at the pod level.
References:
Comments are closed, but trackbacks and pingbacks are open.