Skip to content

Network Observability Questions

Practice questions for Network Observability topic in Cilium Certified Associate. 20 questions covering this domain.

20 questions4 easy12 medium4 hard
Q1
medium

Without Hubble Relay, what scope of visibility does the Hubble API provide?

Q2
easy

What is Hubble in the Cilium ecosystem?

Q3
hard

A policy troubleshooting session needs only dropped flows to a specific pod, not every flow in the cluster. Which command pattern is the best fit?

Q4
medium

What network requirement must be met before enabling Hubble with Relay?

Q5
medium

An engineer wants to verify access to the Hubble API from a workstation using the CLI. Which workflow matches the docs?

Q6
easy

Which Hubble component must be deployed in addition to the per-node Hubble API to enable cluster-wide flow visibility from a single endpoint?

Q7
medium

A developer wants to enable Layer 7 protocol visibility for HTTP traffic on a specific pod without writing a full L7 network policy. Which Cilium anno...

Q8
medium

An operator wants to observe all DNS queries made by a pod to external domains in real time using the Hubble CLI. Which command filters Hubble flows t...

Q9
hard

A site reliability engineer notices that the Hubble CLI returns only flows from a single node even after hubble-relay is running. After running `hubbl...

Q10
medium

An SRE team uses the Hubble UI to investigate a service communication issue. They see a red edge in the service map between `frontend` and `backend`. ...

Q11
medium

In which scenario can Hubble provide visibility across more than one cluster?

Q12
hard

Why is Hubble especially useful for troubleshooting service communication in Cilium-managed clusters?

Q13
easy

Where does the Hubble server run in a Cilium deployment?

Q14
medium

What does Hubble UI provide when used with relay-based visibility?

Q15
medium

Before Hubble Relay is deployed, how does the Hubble CLI typically access the local Hubble API on a node?

Q16
medium

Which Hubble CLI filter shows only traffic encrypted with WireGuard or IPsec?

Q17
hard

A compliance team wants L7 visibility but must avoid exposing query strings, credentials, and sensitive headers in flow records. What is the documente...

Q18
medium

An operator expects to see inbound DNS request visibility in Hubble for a Pod. Which official limitation matters here?

Q19
medium

When using hubble status with the automatic port-forward flag, which local address is used by default for Hubble Relay access?

Q20
easy

Which Hubble component provides a graphical service dependency and connectivity map using relay-based visibility?

Sign in to see all 20 questions

Create a free account to browse all questions — completely free during our launch phase.