Question 1

How does Cilium help in reducing tool sprawl within Kubernetes environments?

Options :

A : By enforcing stricter access controls on tools.

B : By providing automated scaling of all deployed tools.

C : By offering integrated networking, security, and observability functionalities.

D : By limiting the number of supported Kubernetes versions.

Answer: C

Question 2

You have deployed a containerized application and need to ensure that all traffic exiting the container is monitored and adheres to defined network policies. Which Cilium component should you attach a BPF program to for this purpose?

Options :

A : TC ingress hook on the host side of the veth pair

B : Socket operations hook on the cgroup

C : XDP hook on the networking driver

D : Service object with L3/L4 endpoints

Answer: A

Question 3

How does Cilium help organizations avoid vendor lock-in when using public cloud services?

Options :

A : By abstracting vendor-specific network components and enabling seamless cross-cloud networking.

B : By limiting Kubernetes deployments to a single cloud provider.

C : By integrating only with open-source observability tools.

D : By providing proprietary networking extensions for specific cloud providers.

Answer: A

Question 4

How does the Gateway API improve the portability of configurations compared to the traditional Ingress API?

Options :

A : By integrating directly with cloud provider APIs.

B : By eliminating the need for vendor-specific annotations.

C : By using a centralized configuration file that applies to all Kubernetes clusters.

D : By enforcing a strict schema that prevents any form of customization.

Answer: B

Question 5

You have deployed Cilium's egress gateway in your Kubernetes cluster on AWS. However, some pod-to-pod traffic is exiting the cluster with the pod's own IP instead of the egress gateway's IP. What is the most likely cause based on Cilium's configuration guidelines?

Options :

A : There is a delay before egress gateway policies are enforced on new pods.

B : The egress gateway feature is incompatible with AWS.

C : IPv6 traffic is being used.

D : Cilium is configured to use the kvstore identity allocation mode.

Answer: A