ResourceQuota is used to restrict the resources available to pods within a namespace. You can set limits on CPU, memory, storage, and other resources to prevent resource exhaustion. LimitRange is used to set minimum and maximum limits for resources that apply to all pods in a namespace, but not to restrict the total resources used. The other options are not relevant to resource restriction: PodSecurityPolicy restricts security settings, NetworkPolicy manages network traffic, and ServiceAccount provides identity and credentials for pods.

A Cloud Architect is responsible for the overall design, implementation, and management of cloud-based infrastructure, including Kubernetes- They ensure the infrastructure meets the organization's needs for scalability, security, and performance.

PVs are persistent storage resources defined in Kubernetes that can be used to provision storage to pods. PVCs are requests for a PV by a pod or application, specifying the required storage size, access modes, and other attributes. PVs can be shared among multiple pods, but each pod needs a PVC to access the PV.

Ingress resources act as a reverse proxy, routing external traffic to specific services within your Kubernetes cluster. This is crucial for CI/CD pipelines, allowing you to access and test deployed applications from external networks.

NetworkPolicy is the Kubernetes feature designed for controlling network traffic between pods and external sources. It allows you to define rules to allow or deny specific network communication based on source, destination, ports, and other criteria. This helps isolate microservices and enforce network segmentation within the cluster.