Cilium-Associate by Linux Foundation Valid Free Exam Practice Test

Question 1

Which statement about Cilium's identity-based security model is correct?

A. Security is based on the identity of a pod, which is derived through labels. B. By using an IP-address security model, identities can be shared between pods. C. Cilium enforces security based on IP addresses as it provides better scalability and flexibility. D. An endpoint identity Is identified by labels and is tied to a single namespace.

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 2

Which of the following best describes how eBPF is used within Cilium9

A. Cilium utilizes eBPF to gather real-time insights Into network traffic, Including data on latency, bandwidth, and data flows between services. This data Is exposed through a user interface and can be used for network troubleshooting and optimization. B. Cilium uses eBPF to provide a reliable and scalable DNS infrastructure for Kubernetes clusters, enabling seamless communication between services and facilitating service discovery within the cluster C. Cilium leverages eBPF to enforce network security policies at the kernel level. Security rules are translated into eBPF programs that are attached to kernel network hooks, allowing packet filtering based on these rules. D. Cilium is a security-related project that utilizes eBPF for real-time network security analysis. It employs eBPF to detect and respond to network security threats by inspecting network traffic.

Correct Answer: C

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 3

This an Ingress configuration. What is the equivalent Gateway API configuration?

Question 19 source Ingress
A)

Question 19 option A
B)

Question 19 option B
C)

Question 19 option C
D)

Question 19 option D

A. Option B B. Option A C. Option D D. Option C

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 4

What does this Egress Gateway policy achieve?

Cilium Egress Gateway policy exhibit

A. It would cause all traffic sent to pods with the org: empire and class: mediabot labels In the default namespace and destined to 192.168.19.9/24 to be routed through the gateway node with the node.
kubemetes.io/name: egress-node label, which will then DNAT said traffic with the 19.168.69.199 egress IP B. It would cause all traffic originating from pods with the org: empire and class: nediabot labels in the default namespace and destined to 192.168.19.0/24 to be routed through the gateway node with the node.kubernetes.io/name: egress-node label, which will then DN AT said traffic with the 10.168.60.100 egress IP C. It would cause all traffic originating from pods with the org: empire and class: mediabot labels in the default namespace and destined to 192.168.19.0/24 to be routed through the gateway node with the node.kubemetes.io/name: egress-node label, which will then SNAT said traffic with the 10.168.60.100 egress IP D. It would cause all traffic sent to pods with the org: empire and class: mediabot labels in the default namespace and destined to 192.168.10.0/24 to be routed through the gateway node with the node.
kubernetes.io/name: egress-node label, which will then SNAT said traffic with the 10.168.60.180 egress IP

Correct Answer: C

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 5

Please review the output of cilium status below and answer the question that follows. Please note, the output has been modified for accessibility purposes.

Question 2 cilium status exhibit
Assume the cluster is healthy. What is correct about the ci 1 ium status command output above?

A. When specific Cilium features require Layer 7 processing, the Cilium agent starts an Envoy proxy as a separate process within the Cilium agent pod. B. The component that allows you to query multiple Hubble instances simultaneously and aggregate the results is unhealthy. C. The Kubernetes cluster where Cilium has been deployed should consist of four nodes. D. Cilium has been installed and configured in a multi-cluster deployment model to provide load balancing and service discovery.

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 6

What is the purpose of the 12 Announcements" feature?

A. To provide DNS-based service discovery within the cluster. B. To support Layer 2 multicast traffic within Kubernetes. C. To enforce Layer 2-based network security policies. D. To make services visible and reachable on the local area network.

Correct Answer: D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 7

Which statement is true of both the Ingress Controller and Gateway API?

A. It is role-oriented, with some resources for administrators and others for users. B. Its features are commonly extended by using resource annotations. C. It provides portable Layer 7 north-south routing logic for Kubernetes workloads. D. Its routing logic can be restricted to a single namespace.

Correct Answer: C

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Linux Foundation Cilium Certified AssociateCCA - Cilium-Associate Exam Practice Test