Linux Foundation Cilium Certified Associate (CCA) Sample Questions:

1. Which of the following capabilities is enabled by eBPF?

A) Load balancing
B) Real-time traffic monitoring
C) Security policy enforcement
D) All of the above

2. What are the key characteristics of Cilium's identity-based network policies?
(Choose Two)

A) They decouple policy enforcement from IP addresses.
B) They provide stateful traffic inspection.
C) They are tied to specific IP addresses.
D) They allow enforcement based on Kubernetes labels.

3. What distinguishes sidecar-based architectures from sidecarless ones in service mesh deployments?
(Choose Two)

A) Requirement for a dedicated proxy for each service instance in sidecar-based architectures
B) Higher resource consumption in sidecar-based setups due to additional proxies
C) Sidecarless architectures typically exhibit lower latency due to fewer proxy hops
D) Enhanced security isolation in sidecarless architectures

4. Which of the following are essential functionalities of Cilium in managing Kubernetes network policies?
(Choose Two)

A) External load balancing
B) Inter-cluster communication management
C) Access control based on application protocol
D) Pod-to-pod encryption

5. In a service mesh, what is the primary purpose of using Ingress or Gateway APIs for ingress routing?

A) To synchronize services across multiple clouds
B) To manage external access to services within the cluster
C) To monitor and log all incoming traffic
D) To deploy new services automatically

Solutions: