問題文
A developer asks what actually enforces a network policy once it has been applied. Which statement describes where the enforcement happens for layer 3 and layer 4 rules?
選択肢
- In cilium-operator, which programs the decision into each node and is consulted again whenever a new flow starts between two workloads.
- In the Kubernetes API server, which rejects the connection when it does not match an allow rule and records the rejection alongside the audit entries for the request.
- In eBPF programs that the agent manages inside the Linux kernel on the node where the workload runs.
- In a user-space process that receives every packet from the kernel, evaluates the rules against the packet headers, and then hands the packet back to the kernel so that it can continue on its way to the destination.