Question 5
Domain 1: Cluster SetupA Kubernetes administrator wants NetworkPolicy resources to be enforced in a cluster. Which CNI plugin listed in the syllabus supports NetworkPolicy enforcement for this purpose?
Correct answer: A
Explanation
NetworkPolicy rules are only effective when the cluster uses a CNI plugin that implements NetworkPolicy enforcement, such as Calico, Cilium, or Weave Net. — cks_syllabus.txt
Why each option is right or wrong
A. Calico
The provided source explicitly lists Calico as a CNI plugin for NetworkPolicy enforcement, so it satisfies the requirement that NetworkPolicy resources be enforced in the cluster.
B. CoreDNS
CoreDNS provides cluster DNS services, not CNI-based NetworkPolicy enforcement.
C. etcd
etcd stores Kubernetes cluster state; it does not enforce NetworkPolicy as a CNI plugin.
D. kube-apiserver
kube-apiserver exposes the Kubernetes API; NetworkPolicy enforcement is performed by a supporting CNI plugin.