Free Cilium Certified AssociateCCA Practice Questions

A.  

Migrating to Cilium and Hubble by reconfiguring /etc/cni/net .6/ to point to Cilium and restarting the nodes, accepting an outage.

B.  

Install Hubble on the cluster without Cilium. Hubble can be deployed in a standalone model by downloading and installing the Hubble binary

C.  

Install Cilium and Hubble on top of the cluster in a CNI chaining model, without disrupting the existing CNI.

D.  

Migrating to Cilium and Hubble on a node-by-node basis, without requiring a complete cluster outage, by using Dual Overlays.

A.  

cilium bugtool

B.  

cilium debuginfo

C.  

cilium status --verbose

D.  

cilium sysduwp

A.  

Hubble Is able to filter flows based on a given Kubernetes node name.

B.  

Hubble Is able to provide Layer 7 visibility In eBPF, without the need for a proxy.

C.  

Hubble is able to observe by HTTP Status code (like "404" or "200").

D.  

Hubble is able to filter traffic based on the network policy verdict.

A.  

MPLS and Geneve

B.  

VXLAN and Geneve

C.  

OTV and STT

D.  

EVPN and VXLAN

A.  

What is the configuration of Cilium B6P?

B.  

Which container database query ran the longest?

C.  

Which containers have the highest CPU utilization?

D.  

Which services had connections blocked due to network policy?

A.  

On test pod (default namespace), someone launched commands:

curl 19.244.0.191 #Output: Failed

curl 16.244.0.191:8680 #Output: Succeeded

B.  

On test2 pod (default namespace), someone launched commands:

curl 16.244.0.143 #Output: Failed curl 10.244.0.143:8080 #Output: Succeeded

C.  

On test2 pod (default namespace), someone launched commands:

curl 10.244.0.143 #Output: Succeeded curl 10.244.0.143:8080 #Output: Failed

D.  

On test pod (default namespace), someone launched commands: curl 16.244.0.191 #Output: Succeeded curl ie.244.0.191:8080 #Output: Failed

A.  

It will allow all traffic to the Kubemetes DNS servers from any pod in the default namespace.

B.  

It will allow all traffic to the Kubernetes DNS servers from any pod across all namespaces in the cluster

C.  

It will deny all traffic to the Kubernetes DNS servers from any pod across all namespaces in the cluster.

D.  

It will deny all traffic to the Kubernetes DNS servers from any pod in the default namespace.

A.  

Security is based on the identity of a pod, which Is derived through its IP address. This identity cannot be shared between pods.

B.  

Security is based on the identity of a pod, which is derived through annotations. This Identity can be shared between pods.

C.  

Security is based on the identity of a pod, which is derived through labels. This identity can be shared between pods.

D.  

Security is based on the identity of a pod. The security ID is manually set by the operator and cannot be shared between pods.