# In a CiliumNetworkPolicy, what does the entity 'world' match?

Cilium, Hard (Expert), Policies. https://k8wiz.com/uquiz/in-a-ciliumnetworkpolicy-what-does-the-entity-world-match

- A. Every pod in every namespace of the cluster, but not the nodes
- B. The local node and any pods running with hostNetwork: true
- C. All endpoints inside and outside the cluster, including nodes
- D. Everything outside the cluster, the same as allowing 0.0.0.0/0

**Answer:** Everything outside the cluster, the same as allowing 0.0.0.0/0

**Explanation:** Entities name groups that labels can't describe. 'world' covers all endpoints outside the cluster, and allowing it is the same as allowing CIDR 0.0.0.0/0. Other entities include 'host' for the local node, 'remote-node' for the other nodes, 'cluster' for everything inside the cluster, 'kube-apiserver' and 'all'.