CCA問題集、Linux Foundation実際の試験問題

質問 1

Which component of Cilium is primarily responsible for interpreting and enforcing network policies?

A. Cilium Envoy

B. Cilium CLI

C. Cilium Operator

D. Cilium Agent

正解: D

質問 2

What is a primary benefit of using Cluster Mesh for multi-cluster environments?

A. Enabling seamless service discovery across clusters

B. Simplifying the management of single-cluster services

C. Isolating clusters to prevent resource sharing

D. Decreasing overall network traffic

正解: A

質問 3

How does Hubble enhance network observability at the Layer 7 level?

A. Optimizing physical network gear based on observed traffic

B. By restricting access to sensitive network areas

C. Offering insights into application messaging and API calls

D. Managing user access to network resources

正解: C

質問 4

Which Cilium feature allows for the enforcement of network policies across multiple clusters?

A. Multi-Network Overlay

B. Cross-Cluster Routing

C. Cluster Mesh

D. Cilium Firewall

正解: C

質問 5

How does Cilium enhance the security model over traditional firewalls?

A. Through dynamic policy updates without restarting pods

B. Prioritizing traffic based on port numbers only

C. Employing a static rule set that rarely needs updates

D. By using hardware-based filtering

正解: A

質問 6

How can Cilium be configured to handle egress traffic in a multi-cloud environment?
(Choose Two)

A. Using BGP to establish routing protocols across cloud providers

B. Deploying a uniform set of egress rules in each cloud instance

C. Enforcing a single egress point for all cloud traffic

D. By setting up a virtual private network between clouds

正解: A,B

質問 7

How does Cilium integrate with Kubernetes to manage network policies?

A. By modifying the Linux kernel's routing table

B. By using Custom Resource Definitions (CRDs)

C. By injecting sidecar proxies into each pod

D. Through direct manipulation of Kubernetes API server

正解: B

質問 8

Which two are major components of Cilium's architecture?
(Choose Two)

A. Linux kernel customization

B. IP Address Management (IPAM)

C. Datapath models

D. Kubernetes native scheduling

正解: B,C

質問 9

Which of the following statements accurately describe the differences between Kubernetes and Cilium network policies?

A. Kubernetes policies are mainly focused on IP-based rules

B. Kubernetes network policies support identity-based rules

C. Cilium extends capabilities to support security at API level

D. Cilium requires additional plugins for network policy enforcement

正解: A,C

質問 10

Which command is used to test connectivity after installing Cilium in a Kubernetes cluster?

A. cilium test-connectivity

B. cilium connectivity test

C. cilium ping

D. cilium check-connectivity

正解: B

Linux Foundation Cilium Certified Associate (CCA) - CCA 模擬練習