2V0-71.23 Question 12
Select 3You are managing a Kubernetes cluster deployed with VMware Tanzu and need to design a mechanism to control access to specific resources and enforce isolation between development and production environments. Which Kubernetes logical object(s) should you configure to achieve this?
- A
Namespaces
- B
ConfigMaps
- C
NetworkPolicies
- D
PersistentVolumeClaims
- E
ResourceQuotas
Show answer and explanation
Correct answers: A, C, E
Explanation
To enforce isolation and control access in Kubernetes, you can combine namespaces for logical separation, network policies for communication restrictions, and resource quotas to limit resource consumption within those namespaces. ConfigMaps and PersistentVolumeClaims do not directly contribute to these goals.
- A. Correct.
Namespaces are logical objects that allow you to divide a single Kubernetes cluster into multiple virtual clusters, enabling isolation between environments like development and production.
- B. Incorrect.
ConfigMaps are used to store configuration data for applications but do not inherently provide isolation or access control mechanisms.
- C. Correct.
NetworkPolicies are logical objects used to control communication between pods or between pods and external endpoints, which can help enforce network-level isolation between environments.
- D. Incorrect.
PersistentVolumeClaims are storage-related objects and do not play a role in resource isolation or access control between environments.
- E. Correct.
ResourceQuotas are used to limit resource usage (such as CPU, memory, or storage) within a namespace, which can help enforce resource constraints and prevent overconsumption.