Question 1

A large enterprise is experiencing high operational costs due to the time its IT team spends on maintaining network policies and troubleshooting connectivity issues in a Kubernetes cluster. Which Cilium feature would primarily help in reducing this support burden?

Options :

A : Hubble’s observability and self-service access capabilities.

B : Cilium’s eBPF-based datapath.

C : BGP integration for external networking.

D : Cluster Mesh for multi-cluster management.

Answer: A

Question 2

Why is Cilium's egress gateway feature incompatible with the Cluster Mesh feature?

Options :

A : Because egress gateway relies on the identity allocation mode kvstore.

B : Because Cluster Mesh does not support eBPF.

C : Because the egress gateway must be in the same cluster as the selected pods.

D : Because egress gateway requires IPv6 traffic.

Answer: C

Question 3

Which of the following is a feature of Cilium's endpoint-based Layer 3 policies?

Options :

A : Uses hostnames instead of labels for policy definitions.

B : Requires static IP addressing for all pods.

C : Applies policies only to egress traffic.

D : Defines connectivity rules based on pod labels.

Answer: D

Question 4

Which of the following correctly describes how multiple IP blocks can be specified within a single Cilium IP Pool?

Options :

A : IP blocks must be defined either using CIDR notation or range notation, but not both.

B : Each IP Pool is limited to a single IP block, regardless of the notation used.

C : An IP Pool can contain multiple IP blocks defined using a combination of CIDR notation and range notation.

D : Only CIDR notation can be used to define all IP blocks within an IP Pool.

Answer: C

Question 5

Which eBPF programs are used by Constellation’s solution to filter unencrypted pod-to-pod traffic for VXLAN and direct routing, respectively?

Options :

A : bpf_overlay for VXLAN and bpf_host for direct routing.

B : bpf_host for VXLAN and bpf_overlay for direct routing.

C : datapath_vxlan and datapath_direct.

D : filter_vxlan and filter_direct.

Answer: A