Free Linux Foundation Cilium-Certified-Associate Exam Questions

Become Linux Foundation Certified with updated Cilium-Certified-Associate exam questions and correct answers

Page: 1 / 60

Total 300 Questions | Updated On: Aug 02, 2026

Add To Cart

Question 1

You have deployed Cilium's egress gateway in your Kubernetes cluster on AWS. However, some pod-to-pod traffic is exiting the cluster with the pod's own IP instead of the egress gateway's IP. What is the most likely cause based on Cilium's configuration guidelines?

A : There is a delay before egress gateway policies are enforced on new pods.

B : The egress gateway feature is incompatible with AWS.

C : IPv6 traffic is being used.

D : Cilium is configured to use the kvstore identity allocation mode.

Answer: A

Question 2

In a scenario where you need robust load balancing at the kernel layer without relying on kube-proxy, which Cilium feature would you utilize?

A : Cilium's network policies

B : Service Load Balancing with BGP and eBPF

C : Cilium Operator

D : Cilium CLI

Answer: B

Question 3

An administrator wants to apply a network policy that intercepts all DNS traffic without restricting any other traffic on the endpoints. Which field should they configure in the policy to achieve this behavior?

A : Set 'EnableDefaultDeny' for egress and ingress to true.

B : Configure specific allow rules for DNS traffic without modifying 'EnableDefaultDeny'.

C : Omit the 'EnableDefaultDeny' field from the policy.

D : Set 'EnableDefaultDeny' for egress and ingress to false.

Answer: D

Question 4

How does Cilium help in reducing tool sprawl within Kubernetes environments?

A : By enforcing stricter access controls on tools.

B : By providing automated scaling of all deployed tools.

C : By offering integrated networking, security, and observability functionalities.

D : By limiting the number of supported Kubernetes versions.

Answer: C

Question 5

What are the prerequisites for enabling Cilium's egress gateway feature in a Kubernetes cluster?

A : Disabling BPF masquerading.

B : Enabling IPv6 traffic support.

C : Using identity allocation mode kube-proxy.

D : Provisioning network-facing interfaces and IP addresses on gateway nodes.

Answer: D

Page: 1 / 60

Total 300 Questions | Updated On: Aug 02, 2026

Add To Cart