Which of the following is a valid security risk caused by having no egress controls...

Egress NetworkPoliciesrestrict outbound traffic from Pods.

Without egress restrictions, a compromised Pod could exfiltrate sensitive data (secrets, logs, customer data) to an attacker-controlled server.

Exact extract (Kubernetes Docs – Network Policies):

“Egress rules control outbound connections from Pods. Without such restrictions, compromised workloads can connect freely to external endpoints.”

Other options clarified:

A: DoS is more about flooding, not egress absence.

C: “Increased attack surface” is vague but not the main risk.

D: True in a sense, but the precise and most common risk isdata exfiltration.