Linux Foundation Cilium Certified Associate (CCA)

QUESTION NO: 1
How does BGP enhance connectivity for a Cilium-managed Kubernetes cluster?

A. By automating internal IP address management B. Reducing the load on the cluster's ingress controllers C. Isolating the cluster from external network failures D. Providing robust routes to external networks

Correct Answer: D

QUESTION NO: 2
Which two are major components of Cilium's architecture?
(Choose Two)

A. Datapath models B. IP Address Management (IPAM) C. Linux kernel customization D. Kubernetes native scheduling

Correct Answer: A,B

QUESTION NO: 3
What is a unique feature of Cilium's IPAM compared to traditional Kubernetes IPAM solutions?

A. Fine-grained allocation of pod IP addresses B. Static IP assignment for pods C. Dependence on external DHCP services D. Exclusive use of IPv6

Correct Answer: A

QUESTION NO: 4
What does Hubble provide to administrators for network troubleshooting and monitoring?

A. Energy consumption metrics for network devices B. In-depth visibility into application layer protocols and interactions C. Physical network topologies D. Detailed network hardware statistics

Correct Answer: B

QUESTION NO: 5
Which of the following is a key benefit of enabling Layer 7 protocol visibility in Hubble?

A. Simplifies the deployment of new Kubernetes nodes B. It allows for hardware-level network configuration C. Enhances security by providing insights into application-level exchanges D. Reduces the overall cost of network maintenance

Correct Answer: C

QUESTION NO: 6
How does Hubble enhance network observability at the Layer 7 level?

A. Managing user access to network resources B. By restricting access to sensitive network areas C. Offering insights into application messaging and API calls D. Optimizing physical network gear based on observed traffic

Correct Answer: C

QUESTION NO: 7
Which components are critical to managing ingress traffic in a Cilium-managed service mesh?
(Choose Two)

A. Ingress Controller B. Cilium CLI C. Gateway API D. Cilium Operator

Correct Answer: A,C

QUESTION NO: 8
How does encrypting traffic in transit with Cilium enhance security in a service mesh environment?

A. It enables compliance with external audit requirements B. It replaces the need for application-level encryption C. It secures data against external threats only D. It prevents unauthorized data access from within the cluster

Correct Answer: D

QUESTION NO: 9
What are the necessary steps to configure a Cilium Cluster Mesh?
(Choose Two)

A. Establish direct network connectivity between clusters B. Ensure that all clusters have the same network policies C. Synchronize the Kubernetes versions across all clusters D. Install Cilium with Cluster Mesh enabled on each cluster

Correct Answer: A,D

QUESTION NO: 10
What are the benefits of using BGP in a Cilium environment?
(Choose Two)

A. Allows dynamic routing updates B. Enhances security with encrypted routing information C. Simplifies network policy enforcement D. Minimizes latency by optimizing path selection

Correct Answer: A,D

QUESTION NO: 11
Which Kubernetes feature does Cilium extend to enforce more sophisticated network policies?

A. Kubernetes NetworkPolicy B. Kubernetes Ingress Controllers C. Kubernetes StatefulSets D. Kubernetes ConfigMaps

Correct Answer: A

QUESTION NO: 12
How does eBPF support security policy enforcement in Cilium?

A. By enforcing rules directly within the Linux kernel B. By filtering traffic at the application layer only C. By integrating with third-party firewalls D. By managing access control lists (ACLs) in the cloud

Correct Answer: A

QUESTION NO: 13
What is a unique feature of Cilium's IPAM when compared to traditional IPAM solutions in Kubernetes environments?

A. It allows for fine-grained allocation of pod IP addresses B. It supports IPv6 only C. It uses a centralized database for address management D. It can operate without any CNI plugins

Correct Answer: A

QUESTION NO: 14
How does Cilium handle service discovery across multiple clusters in a Cluster Mesh setup?

A. By manually configuring service endpoints in each cluster B. By using Kubernetes services with CrossCluster Service discovery C. By replicating DNS entries across clusters D. Through a centralized database storing all service records

Correct Answer: B

Linux Foundation Cilium Certified Associate (CCA) - CCA Exam Questions