Free Linux Foundation Cilium-Associate Exam Dumps Questions & Answers

What is the default policy enforcement behavior?

• A.If any rule selects an Endpoint and the rule has an ingress section, the Endpoint goes Into default deny at egress. f any rule selects an Endpoint and the rule has an egress section, the Endpoint goes into default deny at ingress.
• B.If any rule selects an Endpoint and the rule has an ingress section, the Endpoint goes Into default allow at egress, f any rule selects an Endpoint and the rule has an egress section, the Endpoint goes into default allow at ingress.
• C.If any rule selects an Endpoint and the rule has an ingress section, the Endpoint goes into default deny at ingress. f any rule selects an Endpoint and the rule has an egress section, the Endpoint goes into default deny at egress.
• D.If any rule selects an Endpoint and the rule has an ingress section, the Endpoint goes Into default allow at Ingress, f any rule selects an Endpoint and the rule has an egress section, the Endpoint goes into default allow at egress.

Which statement is true of both the Ingress Controller and Gateway API?

• A.It is role-oriented, with some resources for administrators and others for users.
• B.Its features are commonly extended by using resource annotations.
• C.It provides portable Layer 7 north-south routing logic for Kubernetes workloads.
• D.Its routing logic can be restricted to a single namespace.

Which component, when available, is able to handle IPAM requests?

• A.Cilium CNIPIugin
• B.Cilium API Server
• C.Cilium Operator
• D.Cilium Agent

Among the definitions provided for the entities host, remote-node, cluster, and all, which description is accurate in the context of Cilium network policy?

• A.The all entity corresponds to all endpoints outside of the cluster. Allowing to all Is identical to allowing to CIDR 0.0.0.0/0.
• B.The remote-node entity represents endpoints not managed by Cilium. Unmanaged endpoints are considered part of the cluster and are included in the cluster entity.
• C.The host entity Includes the local host. This also includes all containers running in host networking mode on the local host.
• D.The cluster entity represents the kube-apiserver in a Kubernetes cluster. This entity represents both deployments of the kube-apiserver: within the cluster and outside of the cluster

Which of these is true of Cilium Cluster Mesh and Network Policies?

• A.Cilium Network Policies can be used to set up load-balancing between multiple clusters in a Cilium Cluster Mesh.
• B.Cilium Network Policies can be used to allow traffic targeting workloads in different clusters of the mesh.
• C.Cilium Network Policies can be used to set up encryption between multiple clusters in a Cilium Cluster Mesh.
• D.Cilium Network Policies can be used to set up mutual authentication between multiple clusters in a Cilium Cluster Mesh.