Which question does Hubble provide the information to answer?

• A.What is the configuration of Cilium B6P?
• B.Which container database query ran the longest?
• C.Which containers have the highest CPU utilization?
• D.Which services had connections blocked due to network policy?

Comment: *

Name: *

Email: *

Verification: *

When using Cilium with the kube-proxy replacement enabled, which underlying technology is effectively replaced with eBPF?

• A.BGP
• B.Routing
• C.Iptables/IPVS
• D.firewalld

Comment: *

Name: *

Email: *

Verification: *

You are managing two Kubernetes clusters, labeled as Cluster A and Cluster B, both of which have Cilium installed. You want to mesh Cluster A and Cluster B together The following characteristics define these clusters:
# Both clusters are configured In encapsulation mode.
# The PodCIDR ranges differ: Cluster A uses 192.168.0.0723, while Cluster B uses 192.168.2.0/24.
# There is IP connectivity between the nodes in all clusters using their respective InternallP addresses.
# The network infrastructure between the clusters enables inter-cluster communication.
# Cluster A runs Kubernetes version 1.28, and Cluster B runs Kubernetes version 1.27.
# Cilium versions also differ, with Cluster A using version 1.14 and Cluster B using version 1.13.
# Both clusters share the same cluster name and cluster ID.
# The Cilium certificate authority differs between Cluster A and Cluster B.
Is it possible to create a cluster mesh given the conditions?

• A.Yes. but you need to change the cluster name and cluster ID before
• B.No, Cilium certificate authority must be the same to deploy a cluster mesh. You cannot change that after installation
• C.No. cluster name and cluster ID must be different. You cannot change that after installation.
• D.Yes, but you need to upgrade cilium version of Cluster B

Comment: *

Name: *

Email: *

Verification: *

Why is the iptables implementation of kube-proxy less scalable than eBPF?

• A.eBPF makes use of the kernel, while iptables does not.
• B.Iptables's complexity is linear while eBPF Is constant-time.
• C.Iptables is incompatible with IPv6 services in Kubernetes.
• D.Iptables is incompatible with eXpressDataPath for smartNICs.

Comment: *

Name: *

Email: *

Verification: *

What is true about WireGuard encryption on Cilium?

• A.Packets are encrypted when they are destined to the same node from which they were sent. This is to ensure confidentiality of traffic within the node.
• B.It provides encryption for node-to-node, pod-to-node, node-to-pod, and pop-to-pod traffic as long as the pods are on different nodes.
• C.When running in the tunneling mode, pod-to-pod traffic will be sent over the WireGuard tunnel before being transmitted over the overlay tunnel.
• D.When WireGuard is enabled in Cilium, each pod will establish a secure WireGuard tunnel between it and all other known pods in the cluster.

Comment: *

Name: *

Email: *

Verification: *