Cilium-Associate試験無料問題集（62題）「Linux Foundation Cilium Certified AssociateCCA 認定」

出題：1

Which component manages the allocation of per-node PodCIDRs in the cluster-scope IPAM (IP address management) mode?

A. Kubernetes through the host-scope IPAM.

B. The Cllium Agents on the nodes.

C. Kubernetes through the Node resource.

D. Cilium Operator via CiliumNode resource.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

Which encapsulation protocols are supported when configuring Cilium in tunnel mode?

A. VXLAN and Geneve

B. MPLS and Geneve

C. EVPN and VXLAN

D. OTV and STT

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

What is the default policy enforcement behavior?

A. If any rule selects an Endpoint and the rule has an ingress section, the Endpoint goes Into default allow at egress, f any rule selects an Endpoint and the rule has an egress section, the Endpoint goes into default allow at ingress.

B. If any rule selects an Endpoint and the rule has an ingress section, the Endpoint goes Into default allow at Ingress, f any rule selects an Endpoint and the rule has an egress section, the Endpoint goes into default allow at egress.

C. If any rule selects an Endpoint and the rule has an ingress section, the Endpoint goes Into default deny at egress. f any rule selects an Endpoint and the rule has an egress section, the Endpoint goes into default deny at ingress.

D. If any rule selects an Endpoint and the rule has an ingress section, the Endpoint goes into default deny at ingress. f any rule selects an Endpoint and the rule has an egress section, the Endpoint goes into default deny at egress.

正解：D 解答を投票する

出題：4

Review the Cilium Network Policy in the YAML file.
It was deployed in the ns-cca namespace on cluster1

Cluster Mesh CiliumNetworkPolicy exhibit
Which statement Is correct?

A. This policy will allow traffic from a Pod named ship in ns-cca namespace in clusterl to a Pod named base in ns-cca namespace in cluster2.

B. This policy will deny traffic from a Pod named ship in ns-cca namespace in clusterl to a Pod named base in ns-cca namespace in cluster2.

C. This policy will allow traffic from a Pod named ship in ns-cca namespace in clusterl to a Pod named base in default namespace in cluster2.

D. This policy will deny traffic from a Pod named ship in ns-cca namespace in clusterl to a Pod named base in default namespace in cluster2.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

Which question does Hubble provide the information to answer?

A. Which services had connections blocked due to network policy?

B. Which container database query ran the longest?

C. What is the configuration of Cilium B6P?

D. Which containers have the highest CPU utilization?

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

What is the default policy enforcement behavior?

A. If any rule selects an Endpoint and the rule has an ingress section, the Endpoint goes Into default allow at egress, f any rule selects an Endpoint and the rule has an egress section, the Endpoint goes into default allow at ingress.

B. If any rule selects an Endpoint and the rule has an ingress section, the Endpoint goes Into default allow at Ingress, f any rule selects an Endpoint and the rule has an egress section, the Endpoint goes into default allow at egress.

C. If any rule selects an Endpoint and the rule has an ingress section, the Endpoint goes Into default deny at egress. f any rule selects an Endpoint and the rule has an egress section, the Endpoint goes into default deny at ingress.

D. If any rule selects an Endpoint and the rule has an ingress section, the Endpoint goes into default deny at ingress. f any rule selects an Endpoint and the rule has an egress section, the Endpoint goes into default deny at egress.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

A user has set up a global service as a Kubernetes user with access to clusters in a Cilium Cluster Mesh. They notice that all traffic is going to remote backend pods. What is a possible explanation?

A. The cluster is not part of the Cilium Cluster Mesh.

B. There are no local endpoints matching the selector for the service.

C. The service.cilium.io/affinity: "none" annotation Is set on the service.

D. The service.cilium.io/shared: "false" annotation is set on the service.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

Cilium-Associate試験無料問題集「Linux Foundation Cilium Certified AssociateCCA 認定」