Free Linux Foundation Cilium-Certified-Associate Exam Questions

Become Linux Foundation Certified with updated Cilium-Certified-Associate exam questions and correct answers

Page: 1 / 60

Total 300 Questions | Updated On: Jun 03, 2025

Add To Cart

Question 1

How does the Gateway API improve the portability of configurations compared to the traditional Ingress API?

A : By integrating directly with cloud provider APIs.

B : By eliminating the need for vendor-specific annotations.

C : By using a centralized configuration file that applies to all Kubernetes clusters.

D : By enforcing a strict schema that prevents any form of customization.

Answer: B

Question 2

Which method is currently not recommended for production environments when migrating Ingress resources to Gateway API?

A : Using the ingress2gateway tool

B : Gradually replacing Ingress resources with Gateway API resources

C : Manual creation of Gateway API resources

D : Creating Gateway API resources based on existing Ingress configurations

Answer: A

Question 3

How does the Gateway API improve the portability of configurations compared to the traditional Ingress API?

A : By integrating directly with cloud provider APIs.

B : By eliminating the need for vendor-specific annotations.

C : By using a centralized configuration file that applies to all Kubernetes clusters.

D : By enforcing a strict schema that prevents any form of customization.

Answer: B

Question 4

An administrator wants to apply a network policy that intercepts all DNS traffic without restricting any other traffic on the endpoints. Which field should they configure in the policy to achieve this behavior?

A : Set 'EnableDefaultDeny' for egress and ingress to true.

B : Configure specific allow rules for DNS traffic without modifying 'EnableDefaultDeny'.

C : Omit the 'EnableDefaultDeny' field from the policy.

D : Set 'EnableDefaultDeny' for egress and ingress to false.

Answer: D

Question 5

You have deployed Cilium's egress gateway in your Kubernetes cluster on AWS. However, some pod-to-pod traffic is exiting the cluster with the pod's own IP instead of the egress gateway's IP. What is the most likely cause based on Cilium's configuration guidelines?

A : There is a delay before egress gateway policies are enforced on new pods.

B : The egress gateway feature is incompatible with AWS.

C : IPv6 traffic is being used.

D : Cilium is configured to use the kvstore identity allocation mode.

Answer: A

Page: 1 / 60

Total 300 Questions | Updated On: Jun 03, 2025

Add To Cart