We're so confident of our products that we provide no hassle product exchange.
Linux Foundation Cilium-Associate Exam Overview:
| Certification Vendor: | Linux Foundation / CNCF |
|---|---|
| Exam Name: | Cilium Certified Associate (CCA) |
| Exam Number: | CCA |
| Exam Duration: | 90 minutes |
| Exam Format: | Online remotely proctored, Scenario-based items, Multiple-choice |
| Certificate Validity Period: | 3 years from certification date |
| Available Languages: | English |
| Real Exam Qty: | Not publicly disclosed |
| Related Certifications: | CKAD — Certified Kubernetes Application Developer CKA — Certified Kubernetes Administrator KCNA — Kubernetes and Cloud Native Associate |
| Passing Score: | Not publicly disclosed |
| Exam Price: | $250 USD (includes one free retake) |
| Recommended Training: | Introduction to Cilium (LFS146) Cilium Official Documentation |
| Exam Registration: | Linux Foundation — CCA Registration CNCF — Cilium Certified Associate Page |
| Sample Questions: | Linux Foundation Cilium-Associate Sample Questions |
| Exam Way: | Online remotely proctored exam; requires webcam, microphone, and stable internet connection |
| Pre Condition: | No mandatory prerequisites; recommended background: basic Kubernetes knowledge, container networking fundamentals, introductory Linux networking, cloud-native security/observability awareness |
| Official Syllabus URL: | https://training.linuxfoundation.org/certification/cilium-certified-associate-cca/ |
Linux Foundation Cilium-Associate Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| eBPF | 10% | - eBPF fundamentals and relevance to Cilium - eBPF-based networking, security, and observability |
| BGP and External Networking | 6% | - BGP peering and service advertisement - External gateway integration |
| Installation and Configuration | 10% | - Deployment methods (Helm, cilium-cli) - Post-install validation and connectivity testing |
| Cluster Mesh | 10% | - Cross-cluster load balancing and failover - Multi-cluster connectivity and service discovery |
| Architecture | 20% | - CNI integration and kube-proxy replacement - Cilium core architecture and components |
| Network Policy | 18% | - Identity-aware and L3–L7 policy models - Cilium vs Kubernetes network policies - Policy enforcement modes |
| Network Observability | 10% | - Hubble architecture and CLI usage - Hubble UI and troubleshooting basics - Layer 7 visibility and flow monitoring |
| Service Mesh | 16% | - Transparent traffic encryption - Sidecar vs sidecarless architecture - Ingress and Gateway API integration |
Linux Foundation Cilium Certified AssociateCCA Sample Questions:
What is a correct statement related to BIG TCP, an eBPF-based feature in Cilium?
- A. BIG TCP addresses the limitation in the size of the packets, caused by the 16-bit length field in the IP header.
- B. BIG TCP is incompatible with features like GRO (Generic Receive Offload) and TSO (Transmit Segmentation Offload).
- C. BIG TCP requires updating the Maximum Transmission Unit (MTU) across the network.
- D. While BIG TCP increases the transactions count, it causes higher latency between pods.
Correct Answer: A 🗳️
Explanation: Only visible for SurePassExams members. You can sign-up / login (it's free).
Which one of the following commands will correctly display show the Cilium configuration?
- A. cilium show run
- B. kubectl describe ciliumconfig.ciliu # .io
- C. cilium config view
- D. cilium show config
Correct Answer: C 🗳️
Explanation: Only visible for SurePassExams members. You can sign-up / login (it's free).
Which statement is true of both the Ingress Controller and Gateway API?
- A. Its features are commonly extended by using resource annotations.
- B. Its routing logic can be restricted to a single namespace.
- C. It provides portable Layer 7 north-south routing logic for Kubernetes workloads.
- D. It is role-oriented, with some resources for administrators and others for users.
Correct Answer: C 🗳️
Explanation: Only visible for SurePassExams members. You can sign-up / login (it's free).
Which statement about Cilium's identity-based security model is correct?
- A. Cilium enforces security based on IP addresses as it provides better scalability and flexibility.
- B. An endpoint identity Is identified by labels and is tied to a single namespace.
- C. By using an IP-address security model, identities can be shared between pods.
- D. Security is based on the identity of a pod, which is derived through labels.
Correct Answer: D 🗳️
Explanation: Only visible for SurePassExams members. You can sign-up / login (it's free).
This an Ingress configuration. What is the equivalent Gateway API configuration?
Question 19 source Ingress
A)
Question 19 option A
B)
Question 19 option B
C)
Question 19 option C
D)
Question 19 option D
- A. Option B
- B. Option D
- C. Option A
- D. Option C
Correct Answer: A 🗳️
Explanation: Only visible for SurePassExams members. You can sign-up / login (it's free).
Viewing page 1 out of 13 pages.
Viewing questions 1-5 out of 62 questions.
By Vivian
