ICA Practice Test 22 — 15 Questions

Question 1

If a VirtualService has a route to a service that has no pods matching the label, what happens?

Accepted Answer

503 Service Unavailable. If no pods exist, the proxy will return a 503 error because it has no destination endpoints.

Answer

Traffic is routed to the default

Answer

Traffic is dropped

Answer

Traffic is routed to external

Question 2

What is the command to view the status of all pods including proxies?

Accepted Answer

kubectl get pods. kubectl get pods shows the status of containers, including the istio-proxy sidecar.

Answer

istioctl pods

Answer

istioctl status

Answer

kubectl describe proxy

Question 3

Which are valid connectionPool settings? (Choose THREE)

Accepted Answer

http2. connectionPool allows settings for tcp, http, and http2.

Answer

grpc

Answer

udp

Question 4

Which command is used to view the current Istio configuration resources in a namespace?

Accepted Answer

kubectl get. kubectl get is the standard tool to list Kubernetes resources, including Istio CRDs.

Answer

istioctl proxy-config

Answer

istioctl dashboard

Answer

istioctl analyze

Question 5

You need to expose an application running in the mesh to traffic from outside the cluster. Which resource is required to define the entry point?

Accepted Answer

Gateway. Gateway resources are used to configure load balancers operating at the edge of the mesh.

Answer

ServiceEntry

Answer

VirtualService

Answer

DestinationRule

Question 6

You have a service that occasionally hangs. You want to ensure that if a request takes longer than 2 seconds, it fails immediately. Which field do you configure?

Accepted Answer

timeout. The timeout field in the HTTPRoute of a VirtualService dictates the deadline.

Answer

delay

Answer

maxConnections

Answer

maxRetries

Question 7

You have an external dependency that is not in the Kubernetes registry. How do you allow the mesh services to communicate with it?

Accepted Answer

Create a ServiceEntry. ServiceEntry is required to include external endpoints in the Istio service registry.

Answer

Create a VirtualService

Answer

Create an EnvoyFilter

Answer

Create a DestinationRule

Question 8

Which TWO fields are mandatory in a Gateway resource?

Accepted Answer

selector. A Gateway requires a selector to bind to ingress gateways and servers for port configuration.

Answer

subsets

Answer

tls

Answer

hosts

Question 9

Where do you configure the hostnames that a Gateway should accept?

Accepted Answer

Gateway. The hosts field in the Gateway resource defines the allowed hostnames.

Answer

DestinationRule

Answer

ServiceEntry

Answer

VirtualService

Question 10

Which THREE fields are found within the 'trafficPolicy' block of a DestinationRule?

Accepted Answer

loadBalancer. loadBalancer, connectionPool, and outlierDetection are the primary components of a trafficPolicy.

Answer

retries

Answer

mirroring

Question 11

Which of the following are valid DestinationRule fields? (Choose THREE)

Accepted Answer

host. DestinationRule includes host, trafficPolicy, and subsets.

Answer

redirect

Answer

match

Question 12

You are observing 503 errors. You want to automatically retry failed requests. Where is this configured?

Accepted Answer

VirtualService. Retries are configured within the HTTPRoute block of a VirtualService.

Answer

ServiceEntry

Answer

DestinationRule

Answer

Gateway

Question 13

To perform a canary deployment, you have two versions of a service. Which resource do you use to split traffic between them?

Accepted Answer

VirtualService. VirtualService supports weight-based routing to split traffic between subsets.

Answer

DestinationRule

Answer

Gateway

Answer

Sidecar

Question 14

What is the primary purpose of the 'subset' field in a VirtualService destination?

Accepted Answer

To route to a specific version/label set. It references the named subset defined in the corresponding DestinationRule.

Answer

To specify a namespace

Answer

To handle failover

Answer

To limit traffic to one pod

Question 15

Which of these are valid load balancer algorithms in DestinationRule? (Choose TWO)

Accepted Answer

ROUND_ROBIN. ROUND_ROBIN and LEAST_CONN are valid load balancer settings in Istio.

Answer

RANDOM_HASH

Answer

PRIORITY

Answer

FIRST_COME