최신Linux Foundation Cilium Certified AssociateCCA - Cilium-Associate무료샘플문제

A. Transparent encryption requires an IPv4-only network.

B. Clusters have too many nodes for transparent encryption.

C. Enable the wireguard transparent encryption.

D. Enable the IPSec transparent encryption.

A. The egress IP must be taken from a public IP address CIDR.

B. Cilium egress gateway manifests only support one label selector.

C. Only interfaces named eth* can be used with Cilium egress gateway

D. The manifest cannot specify both an interface and an egress IP.

A. Network security tools based on eBPF can only police the containers' traffic as they are unable to access the host.

B. After eBPF programs have been loaded, the host needs rebooting before the functionality can be applied.

C. eBPF programs could inspect the decrypted contents of encrypted traffic.

D. eBPF program can only be attached in ingress (inbound from the network interface).

A. There are no local endpoints matching the selector for the service.

B. The service.cilium.io/affinity: "none" annotation Is set on the service.

C. The service.cilium.io/shared: "false" annotation is set on the service.

D. The cluster is not part of the Cilium Cluster Mesh.

A. This policy will allow traffic from a Pod named ship in ns-cca namespace in clusterl to a Pod named base in default namespace in cluster2.

B. This policy will allow traffic from a Pod named ship in ns-cca namespace in clusterl to a Pod named base in ns-cca namespace in cluster2.

C. This policy will deny traffic from a Pod named ship in ns-cca namespace in clusterl to a Pod named base in ns-cca namespace in cluster2.

D. This policy will deny traffic from a Pod named ship in ns-cca namespace in clusterl to a Pod named base in default namespace in cluster2.

A. Linkerd2-proxy

B. HAProxy

C. Envoy

D. Squid

A. cilium status --verbose

B. cilium bugtool

C. cilium sysduwp

D. cilium debuginfo