Study. uk . com
  1. Home
  2. All questions
  3. Question 759

CKA study material · question 759 of 1000

Pod A's namespace has a default-deny egress policy. Pod B's namespace has an ingress policy explicitly allowing A. Can A reach B?

  1. Yes; B's ingress rule is sufficient
  2. Yes, but only for reply traffic
  3. Only if the two namespaces share a label
  4. No; A's egress rules must permit it too
Show the answer

Answer: D. No; A's egress rules must permit it too

A connection needs the source's egress policy and the destination's ingress policy both to allow it; either side refusing is enough to stop it.

Source: Network Policies (Kubernetes) — The two sorts of pod isolation

Challenge yourself on this topic → Study as cards