Free Linux Foundation Cilium-Certified-Associate Exam Questions

Become Linux Foundation Certified with updated Cilium-Certified-Associate exam questions and correct answers

Page: 1 / 60

Total 300 Questions | Updated On: Jul 01, 2026

Add To Cart

Question 1

What is the industry standard CNI plugin for integrating eBPF to replace kube-proxy in Kubernetes?

A : Flannel

B : Weave Net

C : Cilium

D : Calico

Answer: C

Question 2

What is the purpose of the Kubernetes secret named 'cilium-ipsec-keys' in Cilium's IPsec Transparent Encryption setup?

A : To store IPsec configuration including PSKs

B : To store eBPF programs

C : To store network policies

D : To store Cilium's deployment configurations

Answer: A

Question 3

Which of the following is a feature of Cilium's endpoint-based Layer 3 policies?

A : Uses hostnames instead of labels for policy definitions.

B : Requires static IP addressing for all pods.

C : Applies policies only to egress traffic.

D : Defines connectivity rules based on pod labels.

Answer: D

Question 4

Which component of Cilium is responsible for establishing connections with the Kubernetes API server and maintaining network and security policies on each node?

A : CNI Plugin

B : Cilium CLI

C : Cilium Operator

D : Cilium Agent

Answer: D

Question 5

You have multiple services in your Kubernetes cluster, but you want only services labeled with `env=production` to receive IPs from the `production-pool` IP Pool. How should you configure the `production-pool` IP Pool to achieve this?

A : Apply the `env=production` label directly to the `production-pool` metadata.

B : Set `.spec.serviceSelector` to `{ "env": "production" }` in the `production-pool` specification.

C : Name the IP Pool `production-env` to automatically match services with `env=production` label.

D : Use range notation exclusively within the `production-pool` to segregate IPs.

Answer: B

Page: 1 / 60

Total 300 Questions | Updated On: Jul 01, 2026

Add To Cart