Free Linux Foundation Cilium-Certified-Associate Exam Questions

Become Linux Foundation Certified with updated Cilium-Certified-Associate exam questions and correct answers

Page: 1 / 60

Total 300 Questions | Updated On: Jul 30, 2025

Add To Cart

Question 1

What are the prerequisites for enabling Cilium's egress gateway feature in a Kubernetes cluster?

A : Disabling BPF masquerading.

B : Enabling IPv6 traffic support.

C : Using identity allocation mode kube-proxy.

D : Provisioning network-facing interfaces and IP addresses on gateway nodes.

Answer: D

Question 2

Which of the following functionalities is provided by the Cilium CLI Client?

A : Managing and inspecting Cilium’s state, policies, and configurations.

B : Automating IP address management across the cluster.

C : Running eBPF programs within the Linux kernel.

D : Orchestrating service load balancing decisions based on HTTP headers.

Answer: A

Question 3

Which component of Cilium is responsible for establishing connections with the Kubernetes API server and maintaining network and security policies on each node?

A : CNI Plugin

B : Cilium CLI

C : Cilium Operator

D : Cilium Agent

Answer: D

Question 4

An administrator wants to apply a network policy that intercepts all DNS traffic without restricting any other traffic on the endpoints. Which field should they configure in the policy to achieve this behavior?

A : Set 'EnableDefaultDeny' for egress and ingress to true.

B : Configure specific allow rules for DNS traffic without modifying 'EnableDefaultDeny'.

C : Omit the 'EnableDefaultDeny' field from the policy.

D : Set 'EnableDefaultDeny' for egress and ingress to false.

Answer: D

Question 5

An established retail company is aiming to modernize its legacy IT infrastructure by transitioning to a cloud-native, microservices-based architecture. They seek to enhance network security and observability while maintaining performance. How can Cilium assist in this modernization journey?

A : By replacing Kubernetes with a proprietary container orchestration system.

B : By providing a cloud-specific CNI plugin to lock into a single cloud provider.

C : By eliminating the need for containerized applications.

D : By offering advanced networking, security, and observability features that integrate seamlessly with Kubernetes.

Answer: D

Page: 1 / 60

Total 300 Questions | Updated On: Jul 30, 2025

Add To Cart