Free Linux Foundation Cilium-Associate Exam Dumps Questions & Answers

When considering changing an existing cluster's IPAM (IP address management) mode, what is the safest path?

• A.  Directly modify the IPAM configuration of the existing cluster.
• B.  Install a fresh Kubernetes cluster with a new IPAM configuration.
• C.  Change the IPAM mode and restart the Cilium Agents.
• D.  Update the IPAM mode through Kubernetes Node resource.

What is true about WireGuard encryption on Cilium?

• A.  When running in the tunneling mode, pod-to-pod traffic will be sent over the WireGuard tunnel before being transmitted over the overlay tunnel.
• B.  When WireGuard is enabled in Cilium, each pod will establish a secure WireGuard tunnel between it and all other known pods in the cluster.
• C.  Packets are encrypted when they are destined to the same node from which they were sent. This is to ensure confidentiality of traffic within the node.
• D.  It provides encryption for node-to-node, pod-to-node, node-to-pod, and pop-to-pod traffic as long as the pods are on different nodes.

Which proxy does Cilium use to enforce HTTP and other Layer 7 (L7) policies specified in network policies for the cluster?

• A.  Envoy
• B.  Squid
• C.  HAProxy
• D.  Linkerd2-proxy

Please review the output of cilium status below and answer the question that follows. Please note, the output has been modified for accessibility purposes.

Question 2 cilium status exhibit
Assume the cluster is healthy. What is correct about the ci 1 ium status command output above?

• A.  The Kubernetes cluster where Cilium has been deployed should consist of four nodes.
• B.  Cilium has been installed and configured in a multi-cluster deployment model to provide load balancing and service discovery.
• C.  When specific Cilium features require Layer 7 processing, the Cilium agent starts an Envoy proxy as a separate process within the Cilium agent pod.
• D.  The component that allows you to query multiple Hubble instances simultaneously and aggregate the results is unhealthy.

Why is the iptables implementation of kube-proxy less scalable than eBPF?

• A.  Iptables is incompatible with IPv6 services in Kubernetes.
• B.  Iptables is incompatible with eXpressDataPath for smartNICs.
• C.  Iptables's complexity is linear while eBPF Is constant-time.
• D.  eBPF makes use of the kernel, while iptables does not.