Online Access Free Cilium-Associate Practice Test

We observed Hubble output:

Question 7 Hubble flow exhibit
Explain what may have happened:

• A.On test pod (default namespace), someone launched commands:
  curl 19.244.0.191 #Output: Failed
  curl 16.244.0.191:8680 #Output: Succeeded
• B.On test2 pod (default namespace), someone launched commands:
  curl 16.244.0.143 #Output: Failed curl 10.244.0.143:8080 #Output: Succeeded
• C.On test pod (default namespace), someone launched commands: curl 16.244.0.191 #Output: Succeeded curl ie.244.0.191:8080 #Output: Failed
• D.On test2 pod (default namespace), someone launched commands:
  curl 10.244.0.143 #Output: Succeeded curl 10.244.0.143:8080 #Output: Failed

Which one of the following service mesh features and use cases is natively supported by Cilium?

• A.API authorization
• B.Fault injection, such as injection of delay
• C.Layer 7 Load Balancing of gRPC
• D.AP| request limiting

What is true about WireGuard encryption on Cilium?

• A.It provides encryption for node-to-node, pod-to-node, node-to-pod, and pop-to-pod traffic as long as the pods are on different nodes.
• B.When WireGuard is enabled in Cilium, each pod will establish a secure WireGuard tunnel between it and all other known pods in the cluster.
• C.Packets are encrypted when they are destined to the same node from which they were sent. This is to ensure confidentiality of traffic within the node.
• D.When running in the tunneling mode, pod-to-pod traffic will be sent over the WireGuard tunnel before being transmitted over the overlay tunnel.

Review the Cilium Network Policy in the YAML file.
It was deployed in the ns-cca namespace on cluster1

Cluster Mesh CiliumNetworkPolicy exhibit
Which statement Is correct?

• A.This policy will allow traffic from a Pod named ship in ns-cca namespace in clusterl to a Pod named base in default namespace in cluster2.
• B.This policy will deny traffic from a Pod named ship in ns-cca namespace in clusterl to a Pod named base in ns-cca namespace in cluster2.
• C.This policy will allow traffic from a Pod named ship in ns-cca namespace in clusterl to a Pod named base in ns-cca namespace in cluster2.
• D.This policy will deny traffic from a Pod named ship in ns-cca namespace in clusterl to a Pod named base in default namespace in cluster2.

What is a correct statement related to BIG TCP, an eBPF-based feature in Cilium?

• A.BIG TCP is incompatible with features like GRO (Generic Receive Offload) and TSO (Transmit Segmentation Offload).
• B.While BIG TCP increases the transactions count, it causes higher latency between pods.
• C.BIG TCP requires updating the Maximum Transmission Unit (MTU) across the network.
• D.BIG TCP addresses the limitation in the size of the packets, caused by the 16-bit length field in the IP header.