100% Free Cilium-Certified-Associate Practice Exam Questions (2026)

Stay Ahead with Updated Cilium Certified Associate (CCA) Cilium-Certified-Associate Practice Tests & Verified Answers

Linux Foundation Cilium-Certified-Associate Dumps & Practice Test Questions 2026

Page: 1 / 60

Total 300 Questions | Updated On: Sep 04, 2026

Add To Cart

Question 1

Which of the following data stores is used by default in Cilium to propagate state between agents?

A : Zookeeper

B : Kubernetes Custom Resource Definitions (CRDs)

C : etcd

D : Consul

Answer: B

Question 2

You have deployed Cilium's egress gateway in your Kubernetes cluster on AWS. However, some pod-to-pod traffic is exiting the cluster with the pod's own IP instead of the egress gateway's IP. What is the most likely cause based on Cilium's configuration guidelines?

A : There is a delay before egress gateway policies are enforced on new pods.

B : The egress gateway feature is incompatible with AWS.

C : IPv6 traffic is being used.

D : Cilium is configured to use the kvstore identity allocation mode.

Answer: A

Question 3

Which method is currently not recommended for production environments when migrating Ingress resources to Gateway API?

A : Using the ingress2gateway tool

B : Gradually replacing Ingress resources with Gateway API resources

C : Manual creation of Gateway API resources

D : Creating Gateway API resources based on existing Ingress configurations

Answer: A

Question 4

You have defined a Cilium egress Layer 4 policy for endpoints labeled app=myService to allow only TCP traffic on port 80. What will happen to ICMP traffic from these endpoints?

A : ICMP traffic will be allowed only if it is related to connections on port 80.

B : ICMP traffic will be allowed only for specific ICMP types.

C : All ICMP traffic will be blocked.

D : ICMP traffic will continue to be allowed.

Answer: A

Question 5

You have multiple services in your Kubernetes cluster, but you want only services labeled with `env=production` to receive IPs from the `production-pool` IP Pool. How should you configure the `production-pool` IP Pool to achieve this?

A : Apply the `env=production` label directly to the `production-pool` metadata.

B : Set `.spec.serviceSelector` to `{ "env": "production" }` in the `production-pool` specification.

C : Name the IP Pool `production-env` to automatically match services with `env=production` label.

D : Use range notation exclusively within the `production-pool` to segregate IPs.

Answer: B

Page: 1 / 60

Total 300 Questions | Updated On: Sep 04, 2026

Add To Cart