Which of these observability features is NOT supported by Hubble?

• A.Hubble Is able to filter flows based on a given Kubernetes node name.
• B.Hubble Is able to provide Layer 7 visibility In eBPF, without the need for a proxy.
• C.Hubble is able to observe by HTTP Status code (like "404" or "200").
• D.Hubble is able to filter traffic based on the network policy verdict.

Comment: *

Name: *

Email: *

Verification: *

Review the Cilium Network Policy in the YAML file.
It was deployed in the ns-cca namespace on cluster1

Cluster Mesh CiliumNetworkPolicy exhibit
Which statement Is correct?

• A.This policy will allow traffic from a Pod named ship in ns-cca namespace in clusterl to a Pod named base in ns-cca namespace in cluster2.
• B.This policy will allow traffic from a Pod named ship in ns-cca namespace in clusterl to a Pod named base in default namespace in cluster2.
• C.This policy will deny traffic from a Pod named ship in ns-cca namespace in clusterl to a Pod named base in ns-cca namespace in cluster2.
• D.This policy will deny traffic from a Pod named ship in ns-cca namespace in clusterl to a Pod named base in default namespace in cluster2.

Comment: *

Name: *

Email: *

Verification: *

You need to expose an application over HTTPS on your Cilium-managed Kubernetes cluster The security team has specifically asked for traffic to be encrypted all the way from the external clients to the Service.
Which option should you use?

• A.Enable the Gateway API feature and use the TLS Terminate mode and HTTPRoute route type.
• B.Enable the Ingress feature and use the TLS Passthrough mode and TLSRoute route type.
• C.Enable the Ingress feature and use the TLS Terminate mode and HTTPRoute route type.
• D.Enable the Gateway API feature and use the TLS Passthrough mode and TLSRoute route type.

Comment: *

Name: *

Email: *

Verification: *

You are tasked to install Cilium and enable transparent encryption in a cluster in which the following conditions applies:
# Internal cluster traffic is IPv6-only
# The current cluster is running on 5001 nodes
# The cluster is planned to connect to another cluster which has 5001 nodes through Cluster Mesh What are your recommendations regarding transparent encryption?

• A.Enable the wireguard transparent encryption.
• B.Enable the IPSec transparent encryption.
• C.Clusters have too many nodes for transparent encryption.
• D.Transparent encryption requires an IPv4-only network.

Comment: *

Name: *

Email: *

Verification: *

Which one of the following best describes the role Cilium provides in Kubernetes?

• A.Cilium is a monitoring tool for container metrics.
• B.Cilium is a Container Storage Interface (CSI).
• C.Cilium is a logging mechanism for pod operations.
• D.Cilium is a Container Networking Interface (CNI).

Comment: *

Name: *

Email: *

Verification: *