A developer wants to isolate pod traffic using a CNI plugin that supports network segmentation and encryption. Which combination of CNI plugins and features best fits this need?

hard📝 Workflow Q9 of 15

Kubernetes - Networking

ABridge plugin without encryption

BFlannel with VXLAN only

CCalico with IPsec encryption

DHost-local IPAM without network policies

Step-by-Step Solution

Solution:

Step 1: Identify plugins supporting encryption and segmentation
Calico supports network segmentation and can use IPsec for encryption.
Step 2: Evaluate other options
Flannel with VXLAN does not provide encryption by default; Bridge and Host-local lack these features.
Final Answer:
Calico with IPsec encryption -> Option C
Quick Check:
Network isolation + encryption = Calico + IPsec [OK]

Quick Trick: Use Calico with IPsec for secure pod isolation [OK]

Common Mistakes:

Assuming Flannel VXLAN encrypts traffic
Choosing Bridge plugin for encryption
Ignoring network policy support

Master "Networking" in Kubernetes

9 interactive learning modes - each teaches the same concept differently

Learn Why Deep Visual Try Challenge Project Recall Time

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions

More Kubernetes Quizzes

A developer wants to isolate pod traffic using a CNI plugin that supports network segmentation and encryption. Which combination of CNI plugins and features best fits this need?

Step 1: Identify plugins supporting encryption and segmentation

Step 2: Evaluate other options

Final Answer:

Quick Check:

Want More Practice?