Question 1

Which method is currently not recommended for production environments when migrating Ingress resources to Gateway API?

Options :

A : Using the ingress2gateway tool

B : Gradually replacing Ingress resources with Gateway API resources

C : Manual creation of Gateway API resources

D : Creating Gateway API resources based on existing Ingress configurations

Answer: A

Question 2

You have a Cilium-managed Kubernetes cluster where you want to allow endpoints labeled `role=frontend` to communicate with endpoints labeled `role=backend`. Which type of Layer 3 policy would you implement?

Options :

A : Endpoints Based policy

B : IP/CIDR based policy

C : Services based policy

D : DNS based policy

Answer: A

Question 3

What additional capabilities do Cilium Network Policies (CNP) offer over standard Kubernetes Network Policies (KNP)?

Options :

A : CNPs can enforce policies at the application layer (Layer 7).

B : CNPs eliminate the need for Kubernetes labels.

C : CNPs restrict the number of pods in a namespace.

D : CNPs disable default Kubernetes Network Policies.

Answer: A

Question 4

Which component of Cilium is responsible for establishing connections with the Kubernetes API server and maintaining network and security policies on each node?

Options :

A : CNI Plugin

B : Cilium CLI

C : Cilium Operator

D : Cilium Agent

Answer: D

Question 5

Why is Cilium's egress gateway feature incompatible with the Cluster Mesh feature?

Options :

A : Because egress gateway relies on the identity allocation mode kvstore.

B : Because Cluster Mesh does not support eBPF.

C : Because the egress gateway must be in the same cluster as the selected pods.

D : Because egress gateway requires IPv6 traffic.

Answer: C

Free Cilium-Certified-Associate Mock Exam – Practice Online Confidently

Buying Options: