Question 1

A multi-team Kubernetes cluster requires different external access routes based on team-specific policies. How can Cilium’s egress gateway be utilized to manage this requirement?

Options :

A : By using a third-party tool to manage external access routes.

B : By deploying separate egress gateways for each team and applying team-specific routing rules.

C : By creating a single egress gateway for all teams and managing access through global policies.

D : By disabling all egress traffic and allowing only ingress traffic.

Answer: B

Question 2

What are the prerequisites for enabling Cilium's egress gateway feature in a Kubernetes cluster?

Options :

A : Disabling BPF masquerading.

B : Enabling IPv6 traffic support.

C : Using identity allocation mode kube-proxy.

D : Provisioning network-facing interfaces and IP addresses on gateway nodes.

Answer: D

Question 3

An administrator wants to apply a network policy that intercepts all DNS traffic without restricting any other traffic on the endpoints. Which field should they configure in the policy to achieve this behavior?

Options :

A : Set 'EnableDefaultDeny' for egress and ingress to true.

B : Configure specific allow rules for DNS traffic without modifying 'EnableDefaultDeny'.

C : Omit the 'EnableDefaultDeny' field from the policy.

D : Set 'EnableDefaultDeny' for egress and ingress to false.

Answer: D

Question 4

What is the industry standard CNI plugin for integrating eBPF to replace kube-proxy in Kubernetes?

Options :

A : Flannel

B : Weave Net

C : Cilium

D : Calico

Answer: C

Question 5

An established retail company is aiming to modernize its legacy IT infrastructure by transitioning to a cloud-native, microservices-based architecture. They seek to enhance network security and observability while maintaining performance. How can Cilium assist in this modernization journey?

Options :

A : By replacing Kubernetes with a proprietary container orchestration system.

B : By providing a cloud-specific CNI plugin to lock into a single cloud provider.

C : By eliminating the need for containerized applications.

D : By offering advanced networking, security, and observability features that integrate seamlessly with Kubernetes.

Answer: D