Free Linux Foundation Cilium-Certified-Associate Exam Questions

Become Linux Foundation Certified with updated Cilium-Certified-Associate exam questions and correct answers

Page: 1 / 60

Total 300 Questions | Updated On: Jun 15, 2026

Add To Cart

Question 1

An established retail company is aiming to modernize its legacy IT infrastructure by transitioning to a cloud-native, microservices-based architecture. They seek to enhance network security and observability while maintaining performance. How can Cilium assist in this modernization journey?

A : By replacing Kubernetes with a proprietary container orchestration system.

B : By providing a cloud-specific CNI plugin to lock into a single cloud provider.

C : By eliminating the need for containerized applications.

D : By offering advanced networking, security, and observability features that integrate seamlessly with Kubernetes.

Answer: D

Question 2

Which component of Cilium is responsible for establishing connections with the Kubernetes API server and maintaining network and security policies on each node?

A : CNI Plugin

B : Cilium CLI

C : Cilium Operator

D : Cilium Agent

Answer: D

Question 3

An administrator wants to apply a network policy that intercepts all DNS traffic without restricting any other traffic on the endpoints. Which field should they configure in the policy to achieve this behavior?

A : Set 'EnableDefaultDeny' for egress and ingress to true.

B : Configure specific allow rules for DNS traffic without modifying 'EnableDefaultDeny'.

C : Omit the 'EnableDefaultDeny' field from the policy.

D : Set 'EnableDefaultDeny' for egress and ingress to false.

Answer: D

Question 4

You are tasked with extending the Linux kernel functionality to trace system performance without introducing potential kernel instability. Which technology should you utilize?

A : Using eBPF programs to attach to kernel event hooks.

B : Deploying user-space monitoring tools exclusively.

C : Modifying the Linux kernel source code and recompiling.

D : Loading custom kernel modules directly.

Answer: A

Question 5

You have multiple services in your Kubernetes cluster, but you want only services labeled with `env=production` to receive IPs from the `production-pool` IP Pool. How should you configure the `production-pool` IP Pool to achieve this?

A : Apply the `env=production` label directly to the `production-pool` metadata.

B : Set `.spec.serviceSelector` to `{ "env": "production" }` in the `production-pool` specification.

C : Name the IP Pool `production-env` to automatically match services with `env=production` label.

D : Use range notation exclusively within the `production-pool` to segregate IPs.

Answer: B

Page: 1 / 60

Total 300 Questions | Updated On: Jun 15, 2026

Add To Cart