Cilium Certified Associate Questions and Answers

200 questions organized by topic with detailed explanations

Linux Foundation

CCA

200 questions

8 topics

Updated May 2026

Architecture

40 questions12 easy18 medium10 hard~20% of exam

A production cluster needs a different IPAM mode. What does the IPAM documentation recommend as the safest path?In the quick default installation, where does Cilium store and propagate state by default?A platform team wants a CNI that transparently secures connectivity between services in Kubernetes using eBPF. Which pro...

Network Policy

36 questions8 easy18 medium10 hard~18% of exam

What is the default traffic posture for a Cilium-managed endpoint before any policy selects it?An operator wants denied egress from pods to fail fast instead of timing out. What is the documented way to do that?A developer complains that connections to a forbidden destination hang instead of failing immediately. What is the defau...

Service Mesh

32 questions8 easy16 medium8 hard~16% of exam

A backend application behind Cilium Gateway API needs the client address for HTTP requests. Which statement is correct?A platform team wants traffic splitting and header modification without relying on controller-specific annotations. Whic...Which prerequisite set is required for Cilium Gateway API support?

Network Observability

20 questions4 easy12 medium4 hard~10% of exam

Without Hubble Relay, what scope of visibility does the Hubble API provide?What is Hubble in the Cilium ecosystem?A policy troubleshooting session needs only dropped flows to a specific pod, not every flow in the cluster. Which comman...

Installation and Configuration

20 questions7 easy11 medium2 hard~10% of exam

Which command does the quick installation guide use to validate that Cilium is properly installed?In the quick default installation guide, what does Cilium say it will do automatically for most use cases?During installation, the CLI reports that it restarted several existing pods in kube-system. What does that indicate?

Cluster Mesh

20 questions4 easy8 medium8 hard~10% of exam

Which prerequisite is required before connecting clusters with Cilium Cluster Mesh?Two clusters expose a Service with the same name and namespace and annotate it as service.cilium.io/global=true. Later, ...An operator runs cilium clustermesh connect from cluster A to cluster B. What additional step is required to establish c...

eBPF

20 questions5 easy9 medium6 hard~10% of exam

What is eBPF as described in the Cilium component overview?Which pair explains how eBPF programs are kept safe and fast in the kernel?Why can Cilium apply and update security policies without changing application code or container configuration?

BGP and External Networking

12 questions4 easy8 medium~6% of exam

What is the main role of Cilium BGP Control Plane?What does LB IPAM do in Cilium?A BGP peer session is up, but no prefixes are being advertised. Which explanation matches the Cilium docs?

All Questions

#	Question	Topic	Difficulty
1	A production cluster needs a different IPAM mode. What does the IPAM documentation recommend as the ...	Architecture	medium
2	What is the default traffic posture for a Cilium-managed endpoint before any policy selects it?	Network Policy	easy
3	What is eBPF as described in the Cilium component overview?	eBPF	easy
4	In the quick default installation, where does Cilium store and propagate state by default?	Architecture	medium
5	A platform team wants a CNI that transparently secures connectivity between services in Kubernetes u...	Architecture	easy

Sign in to see all 200 questions

Create a free account to browse all questions — completely free during our launch phase.

Sign Up Free Sign In

Ready to test your knowledge?

Take a full Cilium Certified Associate practice test with timed exam simulation.

Start Practice Test