Free Cilium Certified AssociateCCA Practice Questions

A.  

Update the IPAM mode through Kubernetes Node resource.

B.  

Change the IPAM mode and restart the Cilium Agents.

C.  

Directly modify the IPAM configuration of the existing cluster.

D.  

Install a fresh Kubernetes cluster with a new IPAM configuration.

A.  

DNS visibility in available in the ingress direction only.

B.  

It can be enabled by deploying a standard Kubernetes network policy.

C.  

It results in traffic being proxied through an Envoy instance.

D.  

It supports any Layer 7 protocols, including SSH, Telnet and FTP.

A.  

It would enable operators to avoid the unavailability of an application by temporarily forwarding traffic to local clusters while the remote application is being updated.

B.  

It would enable operators to avoid the unavailability of an application by using the Egress Gateway to send the traffic to a remote destination.

C.  

It would enable operators to avoid the unavailability of an application by load-balancing traffic to all endpolnts across both local and remote clusters.

D.  

It would enable operators to avoid the unavailability of an application by temporarily forwarding traffic to remote clusters while the local application is being updated.

A.  

By default, data of SPIRE is stored In memory.

B.  

Cilium's Mutual authentication has been validated with SPIFFE, the production-ready implementation of SPIR

E.  

C.  

Enabling Mutual Authentication on Cilium requires installing, managing, and configuring a SPIRE server.

D.  

Through SPIRE, TLS certificates are automatically managed and frequently rotated.

A.  

The iptables-based masquerading is the most efficient Implementation.

B.  

It replaces the source IP of traffic leaving the cluster to the node's IP address.

C.  

It is comparable to Destination Network Address Translation (DNAT).

D.  

The eBPF-based masquerading is supported on all kernel versions.

A.  

Option A

B.  

Option B

C.  

Option C

D.  

Option D

A.  

cilium status

B.  

cilium sysdump

C.  

cilium context

D.  

cilium config view

A.  

An endpoint identity Is identified by labels and is tied to a single namespace.

B.  

Security is based on the identity of a pod, which is derived through labels.

C.  

By using an IP-address security model, identities can be shared between pods.

D.  

Cilium enforces security based on IP addresses as it provides better scalability and flexibility.

A.  

DNS enforcement mode

B.  

HTTP audit mode

C.  

Policy enforcement mode

D.  

Policy audit mode

A.  

Cilium Agent

B.  

Cilium API Server

C.  

Cilium Operator

D.  

Cilium CNIPIugin