Bird
0
0

How can you combine Envoy sidecar proxies with Kubernetes Network Policies to enhance pod-to-pod communication security?

hard📝 Application Q9 of 15
Kubernetes - Service Mesh
How can you combine Envoy sidecar proxies with Kubernetes Network Policies to enhance pod-to-pod communication security?
AUse Network Policies to restrict traffic to Envoy ports only
BDisable Envoy and rely solely on Network Policies
CAllow all traffic in Network Policies and filter in Envoy
DConfigure Network Policies to block Envoy traffic
Step-by-Step Solution
Solution:
  1. Step 1: Understand Network Policies and Envoy roles

    Network Policies restrict traffic at Kubernetes level; Envoy filters at application level.
  2. Step 2: Combine for layered security

    Restrict traffic to Envoy ports so all pod communication passes through Envoy.
  3. Final Answer:

    Use Network Policies to restrict traffic to Envoy ports only -> Option A
  4. Quick Check:

    Network Policies + Envoy ports restriction = enhanced security [OK]
Quick Trick: Restrict traffic to Envoy ports with Network Policies [OK]
Common Mistakes:
  • Disabling Envoy removes proxy benefits
  • Allowing all traffic defeats Network Policies
  • Blocking Envoy traffic breaks proxy function

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More Kubernetes Quizzes