Study. uk . com
  1. Home
  2. All questions
  3. Question 793

CKA study material · question 793 of 1000

A namespace has an allow-all ingress policy. A second policy is added that permits only one source. What can now reach the Pods?

  1. Only the source named in the second policy
  2. Nothing, because the policies conflict
  3. Only sources allowed by both policies
  4. Everything, since the allow-all policy still applies
Show the answer

Answer: D. Everything, since the allow-all policy still applies

Policies are additive, so no later policy can subtract from what an existing one already permits; the narrower rule adds nothing that was not already allowed.

Source: Network Policies (Kubernetes) — Default policies › Allow all ingress traffic

Challenge yourself on this topic → Study as cards