最新的Linux Foundation Cilium Certified AssociateCCA - Cilium-Associate免費考試真題

A. It would enable operators to avoid the unavailability of an application by temporarily forwarding traffic to local clusters while the remote application is being updated.

B. It would enable operators to avoid the unavailability of an application by temporarily forwarding traffic to remote clusters while the local application is being updated.

C. It would enable operators to avoid the unavailability of an application by using the Egress Gateway to send the traffic to a remote destination.

D. It would enable operators to avoid the unavailability of an application by load-balancing traffic to all endpolnts across both local and remote clusters.

A. No, Cilium certificate authority must be the same to deploy a cluster mesh. You cannot change that after installation

B. Yes. but you need to change the cluster name and cluster ID before

C. Yes, but you need to upgrade cilium version of Cluster B

D. No. cluster name and cluster ID must be different. You cannot change that after installation.

A. The host entity Includes the local host. This also includes all containers running in host networking mode on the local host.

B. The remote-node entity represents endpoints not managed by Cilium. Unmanaged endpoints are considered part of the cluster and are included in the cluster entity.

C. The cluster entity represents the kube-apiserver in a Kubernetes cluster. This entity represents both deployments of the kube-apiserver: within the cluster and outside of the cluster

D. The all entity corresponds to all endpoints outside of the cluster. Allowing to all Is identical to allowing to CIDR 0.0.0.0/0.

A. The iptables-based masquerading is the most efficient Implementation.

B. The eBPF-based masquerading is supported on all kernel versions.

C. It is comparable to Destination Network Address Translation (DNAT).

D. It replaces the source IP of traffic leaving the cluster to the node's IP address.

A. AP| request limiting

B. API authorization

C. Fault injection, such as injection of delay

D. Layer 7 Load Balancing of gRPC

A. After eBPF programs have been loaded, the host needs rebooting before the functionality can be applied.

B. Network security tools based on eBPF can only police the containers' traffic as they are unable to access the host.

C. eBPF program can only be attached in ingress (inbound from the network interface).

D. eBPF programs could inspect the decrypted contents of encrypted traffic.

A. With sidecars, the instrumentation container is Injected into each pod. The application pod has to be restarted for the sidecar to be added.

B. pod start-up time can be significantly slowed by the Injection of sidecars, or worse, It can cause race conditions or other instabilities.

C. Using a networking sidecar means that all traffic to and from the application has to travel through the network stack to reach a proxy container

D. The sidecar approach used by service meshes forces the instrumentation into the source code of the application.