Be able to run istioctl install with revisions and profiles, then move a namespace by updating its istio.io/rev label and restarting deployments. The key is matching the namespace label to the target revision and verifying sidecars before removing the old control plane.
Start practicing
Istio Installation Upgrade And Configuration — choose a session length
Free · No account required
Domain overview
This domain covers installing, upgrading, and configuring Istio across revisions and profiles. You must know istioctl install, revision tags, namespace labels for sidecar injection, and profile selection for dev versus production clusters. Questions test practical cluster operations: moving namespaces between revisions, choosing the right profile, and enabling injection without editing workloads.
Exam objectives
Using istioctl install with --set revision and --set defaultRevision to manage multiple control planes.
Selecting profiles like minimal, demo, or default based on resource and telemetry needs.
Relabeling namespaces with istio-injection or istio.io/rev to control sidecar injection.
Restarting deployments after revision changes so pods pick up new sidecar versions.
Changing a namespace label to a new revision but forgetting to restart workloads, so old sidecars keep running.
Confusing the demo profile with production-ready defaults, then missing high availability and resource settings.
Editing deployment manifests to add injection instead of using namespace labels, which is slower and error-prone.
Click any question to see the full explanation and answer options, or start a focused practice session above.
Which 'istioctl' command is used to verify that the current Istio configuration in a cluster is valid and follows best practices?
2When using IstioOperator to customize the installation, you want to change the number of replicas for the Istiod control plane. Where should this be defined?
3A team wants to enable sidecar injection for a specific namespace without modifying the deployment manifests. What is the most efficient way to achieve this?
4You are installing Istio for a development cluster and want to use a predefined configuration that includes the core components but disables unnecessary features like telemetry to save resources. Which profile should you choose?
5Which profile is recommended for a production environment where high availability and performance are required?
6You have a cluster with multiple revisions of Istio installed. You want to move a namespace from revision '1-18' to '1-19'. What is the correct procedure?
7If you want to use a custom proxy image for your sidecars, where should this be specified in the IstioOperator configuration?
8When configuring an IstioOperator file, what does the 'spec.meshConfig' section primarily control?
9What is the purpose of the 'istio-sidecar-injector' service in the Istio control plane?
10Which TWO of the following are valid ways to verify the status of an Istio control plane deployment?
11Which TWO fields in the IstioOperator CR are commonly used to configure ingress gateway resources?
12When planning an Istio upgrade, which THREE steps are critical for a canary upgrade strategy?
13Which TWO Istio components can be configured via the 'spec.components' section in IstioOperator?
14Your organization runs multiple Istio revisions side-by-side to support a canary upgrade. You have installed revision "1-20-0" and revision "1-21-0". A new namespace, "payments", must have its pods injected with sidecars from revision "1-21-0" only, while other namespaces continue using the default revision. Which label should you apply to the "payments" namespace?
15You are preparing to upgrade Istio from version 1.18 to 1.19 in a production cluster using the canary upgrade method. You have deployed a new istiod revision named '1-19-0' and relabeled a test namespace with 'istio.io/rev=1-19-0'. After verifying that the test namespace's sidecars are injected with the new revision, you want to migrate the remaining application namespaces without causing downtime. Which step should you perform next?
16You are performing a canary upgrade of Istio from version 1.19 to 1.20 using the `istioctl` tool. You have deployed a canary revision of Istiod and now need to migrate a subset of workloads to the new revision without disrupting existing traffic. Which command should you use to relabel the `default` namespace for canary migration, and what is the effect?
17You are preparing to install Istio using the `istioctl install` command with a custom IstioOperator file. You need to ensure that the installation uses a private container registry and that the sidecar injector uses a specific image pull secret. Which two configuration fields in the IstioOperator resource should you set? (Choose two.)
Be able to run istioctl install with revisions and profiles, then move a namespace by updating its istio.io/rev label and restarting deployments. The key is matching the namespace label to the target revision and verifying sidecars before removing the old control plane.
The Courseiva ICA question bank contains 17 questions in the Istio Installation Upgrade And Configuration domain. Click any question to see the full explanation and answer breakdown.
Start with a 10-question focused session to identify your baseline accuracy in this domain. Read every explanation — even for questions you answer correctly — to understand the reasoning. Once you score consistently above 80%, move to a 20–30 question session to confirm depth before moving to the next domain.
Yes — the session launcher on this page draws questions exclusively from the Istio Installation Upgrade And Configuration domain. Choose 10, 20, 30, or 50 questions for a focused session, or click individual questions to review them one by one.
Save your results, see per-domain analytics, and get readiness scores — free, for every certification.
Sign Up FreeFree forever · Every certification included