Question 1

You are tasked with extending the Linux kernel functionality to trace system performance without introducing potential kernel instability. Which technology should you utilize?

Options :

A : Using eBPF programs to attach to kernel event hooks.

B : Deploying user-space monitoring tools exclusively.

C : Modifying the Linux kernel source code and recompiling.

D : Loading custom kernel modules directly.

Answer: A

Question 2

Which eBPF programs are used by Constellation’s solution to filter unencrypted pod-to-pod traffic for VXLAN and direct routing, respectively?

Options :

A : bpf_overlay for VXLAN and bpf_host for direct routing.

B : bpf_host for VXLAN and bpf_overlay for direct routing.

C : datapath_vxlan and datapath_direct.

D : filter_vxlan and filter_direct.

Answer: A

Question 3

Which of the following functionalities is provided by the Cilium CLI Client?

Options :

A : Managing and inspecting Cilium’s state, policies, and configurations.

B : Automating IP address management across the cluster.

C : Running eBPF programs within the Linux kernel.

D : Orchestrating service load balancing decisions based on HTTP headers.

Answer: A

Question 4

What is the industry standard CNI plugin for integrating eBPF to replace kube-proxy in Kubernetes?

Options :

A : Flannel

B : Weave Net

C : Cilium

D : Calico

Answer: C

Question 5

You have defined a Cilium egress Layer 4 policy for endpoints labeled app=myService to allow only TCP traffic on port 80. What will happen to ICMP traffic from these endpoints?

Options :

A : ICMP traffic will be allowed only if it is related to connections on port 80.

B : ICMP traffic will be allowed only for specific ICMP types.

C : All ICMP traffic will be blocked.

D : ICMP traffic will continue to be allowed.

Answer: A

Free Cilium-Certified-Associate Mock Exam – Practice Online Confidently

Buying Options: