CNCFContainer Orchestration

Service & Clusterip — KCNA Practice Question

A representative Kubernetes and Cloud Native Associate (KCNA) exam question on Service & Clusterip. Work through it below, then read why each option is right or wrong.

This question is part of the free Kubernetes and Cloud Native Associate practice test.

Short answer

The correct answer is B. It gets a cluster-internal IP address and is reachable only from inside the cluster unless it is exposed another way..

B is correct because ClusterIP is the default Service type, and it exposes the Service on a cluster-internal IP. A is wrong because a node port is allocated only when the type is NodePort (or LoadBalancer), not for the default type. C is wrong because an external load balancer is provisioned only when the type is LoadBalancer on a cloud that supports it. D is wrong because a Service without a type receives a cluster IP; only a Service with clusterIP set to None gets no IP address.

The Question

A team applies a Service manifest that has a selector and ports but no spec.type field. Which statement describes how this Service can be reached?

AIt gets a static port on every node, so clients outside the cluster can reach it through any node IP address and a fixed port number.
BIt gets a cluster-internal IP address and is reachable only from inside the cluster unless it is exposed another way.Correct
CIt gets a load balancer from the cloud provider, so clients on the public internet reach it through a public IP address from the provider.
DIt gets no IP address at all, so clients must look up the individual pod addresses themselves to reach the backends.

Why B is correct

B is correct because ClusterIP is the default Service type, and it exposes the Service on a cluster-internal IP. A is wrong because a node port is allocated only when the type is NodePort (or LoadBalancer), not for the default type. C is wrong because an external load balancer is provisioned only when the type is LoadBalancer on a cloud that supports it. D is wrong because a Service without a type receives a cluster IP; only a Service with clusterIP set to None gets no IP address.

Why the other options are wrong

Option A: It gets a static port on every node, so clients outside the cluster can reach it through any node IP address and a fixed port number.

Option A does not satisfy the requirement in the scenario. Review the explanation above: the correct choice (B) is the only one that fully meets every constraint stated in the question.

Option C: It gets a load balancer from the cloud provider, so clients on the public internet reach it through a public IP address from the provider.

Option C does not satisfy the requirement in the scenario. Review the explanation above: the correct choice (B) is the only one that fully meets every constraint stated in the question.

Option D: It gets no IP address at all, so clients must look up the individual pod addresses themselves to reach the backends.

Option D does not satisfy the requirement in the scenario. Review the explanation above: the correct choice (B) is the only one that fully meets every constraint stated in the question.

Key idea: Service & Clusterip

B is correct because ClusterIP is the default Service type, and it exposes the Service on a cluster-internal IP. A is wrong because a node port is allocated only when the type is NodePort (or LoadBalancer), not for the default type. C is wrong because an external load balancer is provisioned only when the type is LoadBalancer on a cloud that supports it. D is wrong because a Service without a type receives a cluster IP; only a Service with clusterIP set to None gets no IP address. On the KCNA exam, questions in the "Container Orchestration" domain test whether you can map a scenario's constraints to the right choice. Read the requirement carefully, eliminate options that violate any single constraint, and pick the one that satisfies all of them with the least operational overhead.

Ready to see how you'd score?

Take the free practice quiz and find out which Kubernetes and Cloud Native Associate domains you need to focus on. No signup required.

Practice 5 similar questions

Same cert, same or adjacent domain. Use these after reviewing the explanation.

Related Kubernetes and Cloud Native Associate Practice Questions

Official sources used

Verify program and exam details at the source before scheduling.