Study. uk . com
  1. Home
  2. All questions
  3. Question 791

CKA study material · question 791 of 1000

How is a default-deny ingress policy for a namespace written?

  1. A policy with an empty podSelector and no ingress rules
  2. A policy with a deny action and a wildcard selector
  3. A policy naming every Pod explicitly
  4. An annotation on the Namespace object
Show the answer

Answer: A. A policy with an empty podSelector and no ingress rules

Selecting all Pods while allowing no ingress isolates every Pod in the namespace, including those no other policy mentions.

Source: Network Policies (Kubernetes) — Default policies › Default deny all ingress traffic

Challenge yourself on this topic → Study as cards