最新的Cloud & Containers認證 Cilium-Associate考試題庫

問題1

What would be a benefit of using remote service affinity in a Cluster Mesh deployment?

A. It would enable operators to avoid the unavailability of an application by temporarily forwarding traffic to local clusters while the remote application is being updated.

B. It would enable operators to avoid the unavailability of an application by load-balancing traffic to all endpolnts across both local and remote clusters.

C. It would enable operators to avoid the unavailability of an application by temporarily forwarding traffic to remote clusters while the local application is being updated.

D. It would enable operators to avoid the unavailability of an application by using the Egress Gateway to send the traffic to a remote destination.

正確答案: C

說明：（僅 VCESoft 成員可見）

問題2

You need to expose an application over HTTPS on your Cilium-managed Kubernetes cluster The security team has specifically asked for traffic to be encrypted all the way from the external clients to the Service.
Which option should you use?

A. Enable the Gateway API feature and use the TLS Passthrough mode and TLSRoute route type.

B. Enable the Gateway API feature and use the TLS Terminate mode and HTTPRoute route type.

C. Enable the Ingress feature and use the TLS Passthrough mode and TLSRoute route type.

D. Enable the Ingress feature and use the TLS Terminate mode and HTTPRoute route type.

正確答案: A

說明：（僅 VCESoft 成員可見）

問題3

Which proxy does Cilium use to enforce HTTP and other Layer 7 (L7) policies specified in network policies for the cluster?

A. HAProxy

B. Linkerd2-proxy

C. Squid

D. Envoy

正確答案: D

說明：（僅 VCESoft 成員可見）

問題4

Which of these is true of Cilium Cluster Mesh and Network Policies?

A. Cilium Network Policies can be used to allow traffic targeting workloads in different clusters of the mesh.

B. Cilium Network Policies can be used to set up encryption between multiple clusters in a Cilium Cluster Mesh.

C. Cilium Network Policies can be used to set up load-balancing between multiple clusters in a Cilium Cluster Mesh.

D. Cilium Network Policies can be used to set up mutual authentication between multiple clusters in a Cilium Cluster Mesh.

正確答案: A

說明：（僅 VCESoft 成員可見）

問題5

When using Cilium with the kube-proxy replacement enabled, which underlying technology is effectively replaced with eBPF?

A. Iptables/IPVS

B. BGP

C. firewalld

D. Routing

正確答案: A

說明：（僅 VCESoft 成員可見）

問題6

Which component, when available, is able to handle IPAM requests?

A. Cilium Agent

B. Cilium API Server

C. Cilium Operator

D. Cilium CNIPIugin

正確答案: C

說明：（僅 VCESoft 成員可見）

問題7

Which statement about Cilium's identity-based security model is correct?

A. Security is based on the identity of a pod, which is derived through labels.

B. By using an IP-address security model, identities can be shared between pods.

C. An endpoint identity Is identified by labels and is tied to a single namespace.

D. Cilium enforces security based on IP addresses as it provides better scalability and flexibility.

正確答案: A

說明：（僅 VCESoft 成員可見）

最新的Linux Foundation Cilium Certified AssociateCCA - Cilium-Associate免費考試真題

最新更新

站內鏈接

聯系我們