Free Linux Foundation Cilium-Certified-Associate Exam Questions

Become Linux Foundation Certified with updated Cilium-Certified-Associate exam questions and correct answers

Page: 1 / 60

Total 300 Questions | Updated On: Jan 27, 2026

Add To Cart

Question 1

An administrator wants to apply a network policy that intercepts all DNS traffic without restricting any other traffic on the endpoints. Which field should they configure in the policy to achieve this behavior?

A : Set 'EnableDefaultDeny' for egress and ingress to true.

B : Configure specific allow rules for DNS traffic without modifying 'EnableDefaultDeny'.

C : Omit the 'EnableDefaultDeny' field from the policy.

D : Set 'EnableDefaultDeny' for egress and ingress to false.

Answer: D

Question 2

You have labeled two nodes, worker1 and worker2, with 'perf-test=true' to run network performance tests using Cilium. However, the tests do not execute as expected. What could be the likely cause?

A : The nodes are not labeled correctly.

B : The Cilium CLI version is outdated.

C : The '--node-selector' flag was omitted from the test command.

D : Cilium is not installed with performance testing enabled.

Answer: C

Question 3

You have defined a Cilium egress Layer 4 policy for endpoints labeled app=myService to allow only TCP traffic on port 80. What will happen to ICMP traffic from these endpoints?

A : ICMP traffic will be allowed only if it is related to connections on port 80.

B : ICMP traffic will be allowed only for specific ICMP types.

C : All ICMP traffic will be blocked.

D : ICMP traffic will continue to be allowed.

Answer: A

Question 4

You are planning to migrate your Kubernetes cluster to use a different IPAM mode in Cilium. What is the recommended approach to change the IPAM mode without causing connectivity disruptions?

A : Restart the Cilium agents on all nodes after changing the IPAM mode.

B : Use the Cilium CLI to switch IPAM modes on the fly.

C : Change the IPAM mode directly in the existing cluster's configuration.

D : Install a fresh Kubernetes cluster with the new IPAM configuration.

Answer: D

Question 5

What is the industry standard CNI plugin for integrating eBPF to replace kube-proxy in Kubernetes?

A : Flannel

B : Weave Net

C : Cilium

D : Calico

Answer: C

Page: 1 / 60

Total 300 Questions | Updated On: Jan 27, 2026

Add To Cart