Free Linux Foundation Cilium-Certified-Associate Exam Questions

Become Linux Foundation Certified with updated Cilium-Certified-Associate exam questions and correct answers

Page: 1 / 60

Total 300 Questions | Updated On: Mar 28, 2025

Add To Cart

Question 1

Which protocol is natively supported by the Kubernetes Ingress API?

A : UDP

B : HTTP

C : DNS

D : TCP

Answer: B

Question 2

Which annotation is required to declare a Kubernetes service as global for load balancing across multiple Cilium-enabled Kubernetes clusters?

A : cilium.io/global: "enabled"

B : cilium.io/service-global: "yes"

C : service.cilium.io/shared: "true"

D : service.cilium.io/global: "true"

Answer: D

Question 3

An administrator wants to apply a network policy that intercepts all DNS traffic without restricting any other traffic on the endpoints. Which field should they configure in the policy to achieve this behavior?

A : Set 'EnableDefaultDeny' for egress and ingress to true.

B : Configure specific allow rules for DNS traffic without modifying 'EnableDefaultDeny'.

C : Omit the 'EnableDefaultDeny' field from the policy.

D : Set 'EnableDefaultDeny' for egress and ingress to false.

Answer: D

Question 4

You have defined a Cilium egress Layer 4 policy for endpoints labeled app=myService to allow only TCP traffic on port 80. What will happen to ICMP traffic from these endpoints?

A : ICMP traffic will be allowed only if it is related to connections on port 80.

B : ICMP traffic will be allowed only for specific ICMP types.

C : All ICMP traffic will be blocked.

D : ICMP traffic will continue to be allowed.

Answer: A

Question 5

You are planning to migrate your Kubernetes cluster to use a different IPAM mode in Cilium. What is the recommended approach to change the IPAM mode without causing connectivity disruptions?

A : Restart the Cilium agents on all nodes after changing the IPAM mode.

B : Use the Cilium CLI to switch IPAM modes on the fly.

C : Change the IPAM mode directly in the existing cluster's configuration.

D : Install a fresh Kubernetes cluster with the new IPAM configuration.

Answer: D

Page: 1 / 60

Total 300 Questions | Updated On: Mar 28, 2025

Add To Cart