Bird
0
0

Why do namespaces not provide complete security isolation in Kubernetes?

hard📝 Conceptual Q10 of 15
Kubernetes - Namespaces
Why do namespaces not provide complete security isolation in Kubernetes?
ABecause namespaces prevent any communication between pods
BBecause namespaces only isolate resources logically, not at the kernel or network level
CBecause namespaces encrypt all data by default
DBecause namespaces automatically share secrets across all namespaces
Step-by-Step Solution
Solution:
  1. Step 1: Understand namespace isolation scope

    Namespaces separate resources logically but share the same underlying cluster infrastructure.
  2. Step 2: Recognize limits of namespace isolation

    They do not isolate at kernel or network layers fully, so additional security controls are needed.
  3. Final Answer:

    Because namespaces only isolate resources logically, not at the kernel or network level -> Option B
  4. Quick Check:

    Namespaces logical isolation only = C [OK]
Quick Trick: Namespaces isolate logically, not fully secure by themselves [OK]
Common Mistakes:
  • Thinking namespaces encrypt data automatically
  • Assuming namespaces block all pod communication
  • Believing secrets are shared across namespaces

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More Kubernetes Quizzes