Get list of all pods in all namespaces and write it to file "/opt/pods-list.yaml" See the solution below.

Comment: *

Name: *

Email: *

Verification: *

Create a pod with environment variables as var1=value1.Check the environment variable in pod See the solution below.

Comment: *

Name: *

Email: *

Verification: *

What is the maximum number of samples that can be submitted to WildFire manually per day?

• A.1,000
• B.5,000
• C.15,000
• D.2,000

Comment: *

Name: *

Email: *

Verification: *

You are deploying an application on Kubernetes that requires access to a specific external service. This service is only accessible from the cluster network. Describe how you can implement a NetworkPolicy to secure access to the external service from the application pods.

Correct Answer:

See the solution below with Step by Step Explanation.
Explanation:
Solution (Step by Step) :
1 . Create a NetworkPolicy for the Application Pods:
- Define a NetworkPolicy rule that allows ingress traffic from the application pods to the external service. This policy should be applied to the namespace where the application pods are running.

2. Configure Network Access to the External Service: - Ensure that the external service is accessible from the cluster network. This might involve using a dedicated load balancer, a service proxy, or a network tunnel. 3. Implement a Service for the External Service: - Create a Kubernetes Service to represent the external service and expose it within the cluster. This service can be a headless service, which doesn't provide a public endpoint, as the external service is only accessible from the cluster network.

4. Verify Network Policy Configuration: - Verify that the NetworkPolicy is applied correctly and that the application pods can access the external service. Use 'kubectl get networkpolicies myapp-networkpolicy' to check the policy status and 'kubectl describe pod myapp-XXXX' (where XXXX is a pod name) to check the pod's network configuration.

Comment: *

Name: *

Email: *

Verification: *

You are deploying a highly sensitive application to a Kubernetes cluster. You need to configure CoreDNS to enforce strict access control and ensure that only authorized clients can perform DNS lookups.

Correct Answer:

See the solution below with Step by Step Explanation.
Explanation:
Solution (Step by Step) :
1. Enable DNSSEC Validation:
- Configure CoreDNS to validate DNSSEC signatures to ensure that DNS responses are not tampered with.

2. Use Network Policies: - Implement network policies to restrict access to the CoreDNS service. Only authorized pods should be allowed to send DNS queries to CoreDNS.

3. Use RBAC for Access Control: - Implement Role-Based Access Control (RBAC) to restrict access to CoreDNS resources. Only authorized users or service accounts should be able to modify the CoreDNS configuration or access its logs.

4. Use Secure DNS: - Enable DNS over TLS (DOT) or DNS over HTTPS (DOH) to secure communication between pods and CoreDNS. This will prevent eavesdropping and data tampering.

Comment: *

Name: *

Email: *

Verification: *