Free Linux Foundation Cilium-Certified-Associate Exam Questions

Become Linux Foundation Certified with updated Cilium-Certified-Associate exam questions and correct answers

Page: 1 / 60

Total 300 Questions | Updated On: Sep 23, 2026

Add To Cart

Question 1

Which of the following correctly describes how multiple IP blocks can be specified within a single Cilium IP Pool?

A : IP blocks must be defined either using CIDR notation or range notation, but not both.

B : Each IP Pool is limited to a single IP block, regardless of the notation used.

C : An IP Pool can contain multiple IP blocks defined using a combination of CIDR notation and range notation.

D : Only CIDR notation can be used to define all IP blocks within an IP Pool.

Answer: C

Question 2

What is the purpose of the Kubernetes secret named 'cilium-ipsec-keys' in Cilium's IPsec Transparent Encryption setup?

A : To store IPsec configuration including PSKs

B : To store eBPF programs

C : To store network policies

D : To store Cilium's deployment configurations

Answer: A

Question 3

How does Cilium help in reducing tool sprawl within Kubernetes environments?

A : By enforcing stricter access controls on tools.

B : By providing automated scaling of all deployed tools.

C : By offering integrated networking, security, and observability functionalities.

D : By limiting the number of supported Kubernetes versions.

Answer: C

Question 4

Which Cilium CLI command is used to generate an installation script for external workloads?

A : cilium external generate-install

B : cilium clustermesh vm generate-script

C : cilium clustermesh vm install

D : cilium install external-workload

Answer: C

Question 5

An administrator wants to apply a network policy that intercepts all DNS traffic without restricting any other traffic on the endpoints. Which field should they configure in the policy to achieve this behavior?

A : Set 'EnableDefaultDeny' for egress and ingress to true.

B : Configure specific allow rules for DNS traffic without modifying 'EnableDefaultDeny'.

C : Omit the 'EnableDefaultDeny' field from the policy.

D : Set 'EnableDefaultDeny' for egress and ingress to false.

Answer: D

Page: 1 / 60

Total 300 Questions | Updated On: Sep 23, 2026

Add To Cart