Linux Foundation Cilium-Associate Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| eBPF | 10% | - eBPF fundamentals and relevance to Cilium - eBPF-based networking, security, and observability |
| BGP and External Networking | 6% | - BGP peering and service advertisement - External gateway integration |
| Cluster Mesh | 10% | - Multi-cluster connectivity and service discovery - Cross-cluster load balancing and failover |
| Architecture | 20% | - CNI integration and kube-proxy replacement - Cilium core architecture and components |
| Network Observability | 10% | - Hubble UI and troubleshooting basics - Layer 7 visibility and flow monitoring - Hubble architecture and CLI usage |
| Installation and Configuration | 10% | - Post-install validation and connectivity testing - Deployment methods (Helm, cilium-cli) |
| Network Policy | 18% | - Policy enforcement modes - Cilium vs Kubernetes network policies - Identity-aware and L3–L7 policy models |
| Service Mesh | 16% | - Sidecar vs sidecarless architecture - Transparent traffic encryption - Ingress and Gateway API integration |
Linux Foundation Cilium Certified AssociateCCA Sample Questions:
Question #1
What is correct about this Cilium Network Policy?
Question 21 Cilium Network Policy exhibit
A. It will deny all traffic to the Kubernetes DNS servers from any pod in the default namespace.
B. It will deny all traffic to the Kubernetes DNS servers from any pod across all namespaces in the cluster.
C. It will allow all traffic to the Kubemetes DNS servers from any pod in the default namespace.
D. It will allow all traffic to the Kubernetes DNS servers from any pod across all namespaces in the cluster
Question #2
What does this Egress Gateway policy achieve?
Cilium Egress Gateway policy exhibit
A. It would cause all traffic sent to pods with the org: empire and class: mediabot labels In the default namespace and destined to 192.168.19.9/24 to be routed through the gateway node with the node.
kubemetes.io/name: egress-node label, which will then DNAT said traffic with the 19.168.69.199 egress IP
B. It would cause all traffic sent to pods with the org: empire and class: mediabot labels in the default namespace and destined to 192.168.10.0/24 to be routed through the gateway node with the node.
kubernetes.io/name: egress-node label, which will then SNAT said traffic with the 10.168.60.180 egress IP
C. It would cause all traffic originating from pods with the org: empire and class: mediabot labels in the default namespace and destined to 192.168.19.0/24 to be routed through the gateway node with the node.kubemetes.io/name: egress-node label, which will then SNAT said traffic with the 10.168.60.100 egress IP
D. It would cause all traffic originating from pods with the org: empire and class: nediabot labels in the default namespace and destined to 192.168.19.0/24 to be routed through the gateway node with the node.kubernetes.io/name: egress-node label, which will then DN AT said traffic with the 10.168.60.100 egress IP
Question #3
Which Cilium command should you execute to gather network-related troubleshooting information from your Kubernetes cluster?
A. cilium debuginfo
B. cilium status --verbose
C. cilium sysduwp
D. cilium bugtool
Question #4
The Cilium Agent is deployed as part of the Cilium installation. What of the following is true about the Cilium Agent?
A. Cilium Agent synchronizes Kubernetes nodes information to the shared KVStore.
B. Cilium Agent creates the CiliumEndpoint objects for each pod in the cluster.
C. Cilium Agent manages IP addresses for LoadBalancer type services (if LB IPAM is used).
D. Cilium Agent registers the Custom Resource Definitions that Cilium uses.
Question #5
What is an accurate description related to eBPF?
A. eBPF programs could inspect the decrypted contents of encrypted traffic.
B. eBPF program can only be attached in ingress (inbound from the network interface).
C. Network security tools based on eBPF can only police the containers' traffic as they are unable to access the host.
D. After eBPF programs have been loaded, the host needs rebooting before the functionality can be applied.
Solutions:
| Question #1 Correct Answer: C | Question #2 Correct Answer: C | Question #3 Correct Answer: C | Question #4 Correct Answer: B | Question #5 Correct Answer: A |
23 Customer Reviews
Quality and ValueITCertKing Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITCertKing testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITCertKing offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
