Cilium Certified Associate Questions and Answers

300 questions organized by topic with detailed explanations

Linux Foundation

CCA

300 questions

8 topics

Updated Jul 2026

Architecture

60 questions18 easy28 medium14 hard~20% of exam

A production cluster needs a different IPAM mode. What does the IPAM documentation recommend as the safest path?In the quick default installation, where does Cilium store and propagate state by default?A platform team wants a CNI that transparently secures connectivity between services in Kubernetes using eBPF. Which pro...

Network Policy

54 questions12 easy28 medium14 hard~18% of exam

What is the default traffic posture for a Cilium-managed endpoint before any policy selects it?An operator wants denied egress from pods to fail fast instead of timing out. What is the documented way to do that?A developer complains that connections to a forbidden destination hang instead of failing immediately. What is the defau...

Service Mesh

48 questions12 easy25 medium11 hard~16% of exam

A backend application behind Cilium Gateway API needs the client address for HTTP requests. Which statement is correct?A platform team wants traffic splitting and header modification without relying on controller-specific annotations. Whic...Which prerequisite set is required for Cilium Gateway API support?

Network Observability

30 questions5 easy18 medium7 hard~10% of exam

Without Hubble Relay, what scope of visibility does the Hubble API provide?What is Hubble in the Cilium ecosystem?A policy troubleshooting session needs only dropped flows to a specific pod, not every flow in the cluster. Which comman...

Installation and Configuration

30 questions10 easy17 medium3 hard~10% of exam

Which command does the quick installation guide use to validate that Cilium is properly installed?In the quick default installation guide, what does Cilium say it will do automatically for most use cases?During installation, the CLI reports that it restarted several existing pods in kube-system. What does that indicate?

Cluster Mesh

30 questions7 easy11 medium12 hard~10% of exam

Which prerequisite is required before connecting clusters with Cilium Cluster Mesh?Two clusters expose a Service with the same name and namespace and annotate it as service.cilium.io/global=true. Later, ...An operator runs cilium clustermesh connect from cluster A to cluster B. What additional step is required to establish c...

eBPF

30 questions8 easy12 medium10 hard~10% of exam

What is eBPF as described in the Cilium component overview?Which pair explains how eBPF programs are kept safe and fast in the kernel?Why can Cilium apply and update security policies without changing application code or container configuration?

BGP and External Networking

18 questions6 easy11 medium1 hard~6% of exam

What is the main role of Cilium BGP Control Plane?What does LB IPAM do in Cilium?A BGP peer session is up, but no prefixes are being advertised. Which explanation matches the Cilium docs?

All Questions

#	Question	Topic	Difficulty
1	A production cluster needs a different IPAM mode. What does the IPAM documentation recommend as the ...	Architecture	medium
2	What is the default traffic posture for a Cilium-managed endpoint before any policy selects it?	Network Policy	easy
3	What is eBPF as described in the Cilium component overview?	eBPF	easy
4	In the quick default installation, where does Cilium store and propagate state by default?	Architecture	medium
5	A platform team wants a CNI that transparently secures connectivity between services in Kubernetes u...	Architecture	easy

Sign in to see all 300 questions

Create a free account to browse the questions included with the free plan.

Sign Up Free Sign In

Ready to test your knowledge?

Take a full Cilium Certified Associate practice test with timed exam simulation.

Start Practice Test