Linux Foundation Cilium-Associate Exam Overview:
| Certification Vendor: | Linux Foundation |
|---|---|
| Exam Name: | Cilium Certified Associate (CCA) |
| Exam Number: | CCA |
| Real Exam Qty: | 60 |
| Exam Duration: | 90 minutes |
| Exam Format: | Multiple Choice, Online Proctored |
| Passing Score: | 75% |
| Exam Price: | $250 USD |
| Available Languages: | English |
| Certificate Validity Period: | 2 years |
| Sample Questions: | Linux Foundation Cilium-Associate Sample Questions |
| Exam Way: | Online, remotely proctored exam via PSI. |
| Pre Condition: | No prerequisites. Linux Foundation recommends Kubernetes and basic networking knowledge, including the OSI 7-layer model and basic TCP, UDP, DNS, and HTTP concepts. |
| Official Syllabus URL: | https://training.linuxfoundation.org/certification/cilium-certified-associate-cca/ |
Linux Foundation Cilium-Associate Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Network Observability | 10% | - Understand the Observability Capabilities of Hubble
|
| Installation and Configuration | 10% | - Know How to Use Cilium CLI to Query and Modify the Configuration
|
| Network Policy | 18% | - Interpret Cilium Network Policies and Intent
|
| Service Mesh | 16% | - Know How to use Ingress or Gateway API for Ingress Routing
|
| Cluster Mesh | 10% | - Understand the Benefits of Cluster Mesh for Multi-cluster Connectivity
|
| Architecture | 20% | - Understand the Role of Cilium in Kubernetes Environments
|
| eBPF | 10% | - Understand the Role of eBPF in Cilium
|
| BGP and External Networking | 6% | - Egress Connectivity Requirements
|
Linux Foundation Cilium Certified AssociateCCA Sample Questions:
Which affirmation is true about eBPF host-routing?
- A. eBPF host-routing allows the network stack to prepare larger GSO (transmit) and GRO (receive) packets to reduce the number of times the stack is traversed, which improves performance and latency.
- B. eBPF host-routing ensures that traffic is distributed evenly across multiple backend services, improving the overall efficiency of load balancing.
- C. eBPF host-routing allows bypassing iptables and upper stack overhead in the host namespace and some context-switching overhead when traversing through the Virtual Ethernet pairs.
- D. eBPF host-routing is particularly suitable when pods are exposed behind Kubernetes Services, which face external clients from the Internet.
Correct Answer: C 🗳️
Explanation: Only visible for BraindumpQuiz members. You can sign-up / login (it's free).
A user has set up a global service as a Kubernetes user with access to clusters in a Cilium Cluster Mesh. They notice that all traffic is going to remote backend pods. What is a possible explanation?
- A. There are no local endpoints matching the selector for the service.
- B. The service.cilium.io/shared: "false" annotation is set on the service.
- C. The cluster is not part of the Cilium Cluster Mesh.
- D. The service.cilium.io/affinity: "none" annotation Is set on the service.
Correct Answer: A 🗳️
Explanation: Only visible for BraindumpQuiz members. You can sign-up / login (it's free).
Which component manages the allocation of per-node PodCIDRs in the cluster-scope IPAM (IP address management) mode?
- A. The Cllium Agents on the nodes.
- B. Kubernetes through the host-scope IPAM.
- C. Cilium Operator via CiliumNode resource.
- D. Kubernetes through the Node resource.
Correct Answer: C 🗳️
Explanation: Only visible for BraindumpQuiz members. You can sign-up / login (it's free).
What is true about Layer 7 protocol visibility in Cilium?
- A. It can be enabled by deploying a standard Kubernetes network policy.
- B. It results in traffic being proxied through an Envoy instance.
- C. It supports any Layer 7 protocols, including SSH, Telnet and FTP.
- D. DNS visibility in available in the ingress direction only.
Correct Answer: B 🗳️
Explanation: Only visible for BraindumpQuiz members. You can sign-up / login (it's free).
Which of these is true of Cilium Cluster Mesh and Network Policies?
- A. Cilium Network Policies can be used to set up load-balancing between multiple clusters in a Cilium Cluster Mesh.
- B. Cilium Network Policies can be used to allow traffic targeting workloads in different clusters of the mesh.
- C. Cilium Network Policies can be used to set up encryption between multiple clusters in a Cilium Cluster Mesh.
- D. Cilium Network Policies can be used to set up mutual authentication between multiple clusters in a Cilium Cluster Mesh.
Correct Answer: B 🗳️
Explanation: Only visible for BraindumpQuiz members. You can sign-up / login (it's free).
We're so confident of our products that we provide no hassle product exchange.


By Warner

