Quiz 1 of 5: Architecture, access and compute
1
What connects EKS's AWS-managed control plane to your worker nodes?
Why: EKS creates cross-account ENIs in the subnets you give it, so the AWS-operated API servers can reach kubelets and nodes can reach the API server. Peering or Direct Connect are not involved.
2
Which API endpoint configuration is the most common choice for production?
Why: Nodes use the private path, and engineers and CI come in from known ranges. Private only is tighter but needs network paths into the VPC for every kubectl call.
3
Which statement about EKS access entries is correct?
Why: Access entries replace the hand-edited aws-auth ConfigMap with API objects that are reviewable and audited. The mode switch only goes forward, so migrate deliberately.