Study. uk . com
  1. Home
  2. All questions
  3. Question 766

CKA study material · question 766 of 1000

An incident responder applies a restrictive NetworkPolicy to cut off a compromised Pod's live connections. What should they expect?

  1. Established connections are always closed within one sync interval
  2. Whether existing connections are closed is left to the network plugin
  3. Only inbound connections are closed; outbound ones persist
  4. The policy takes effect only after the Pod restarts
Show the answer

Answer: B. Whether existing connections are closed is left to the network plugin

The effect of a policy change on connections already established is implementation defined, so tightening a policy is not a reliable way to cut off traffic in flight.

Source: Network Policies (Kubernetes) — NetworkPolicy's impact on existing connections

Challenge yourself on this topic → Study as cards