Question 1

Which IPAM modes in Cilium do not support tunnel routing?

Options :

A : Multi-Pool and CRD-backed

B : AWS ENI, Azure IPAM, and GKE

C : All IPAM modes support tunnel routing

D : Cluster Scope and Kubernetes Host Scope

Answer: B

Question 2

What is an advantage of using Endpoints Based Layer 3 policies in Cilium?

Options :

A : It decouples policies from IP addressing.

B : It requires encoding IP addresses into policies.

C : It allows specifying policies based on DNS names.

D : It necessitates hardcoding subnets into the policies.

Answer: A

Question 3

You have deployed Cilium's egress gateway in your Kubernetes cluster on AWS. However, some pod-to-pod traffic is exiting the cluster with the pod's own IP instead of the egress gateway's IP. What is the most likely cause based on Cilium's configuration guidelines?

Options :

A : There is a delay before egress gateway policies are enforced on new pods.

B : The egress gateway feature is incompatible with AWS.

C : IPv6 traffic is being used.

D : Cilium is configured to use the kvstore identity allocation mode.

Answer: A

Question 4

Which configuration option should you use with the Cilium CLI to set the maximum number of connected clusters to 511 during installation?

Options :

A : --set max-connected-clusters=511

B : --set clustermesh.maxConnectedClusters=511

C : --set clustermesh.max=511

D : --set cluster.mesh.max=511

Answer: B

Question 5

Which Cilium CLI command is used to generate an installation script for external workloads?

Options :

A : cilium external generate-install

B : cilium clustermesh vm generate-script

C : cilium clustermesh vm install

D : cilium install external-workload

Answer: C