A CKAD-style task asks you to restrict a checkout Pod’s egress to its payment API Service Pods on TCP 8443. What is the appropriate focus?
Select an answer to reveal the explanation.
Short Explanation
CKAD cares about the app’s hallway doors—checkout to payment—not rebuilding the courthouse security system. Scope the NetworkPolicy to that egress path and port. Leave apiserver hardening and CNI installs for admin/security exams.
Full Explanation
CKAD NetworkPolicy items emphasize application ingress/egress paths using pod and namespace selectors and ports. Restricting checkout egress to payment backends on TCP 8443 is in scope. Cluster API server hardening, etcd encryption, and CNI installation are CKA/CKS-leaning concerns and should not displace the app-traffic solution. CoreDNS remains required for normal Service discovery.