ICA Practice Test 6 — 10 Questions

Question 1

You want to ensure that a pod is only ejected if it fails consistently. Which setting is most appropriate?

Accepted Answer

Increase interval, increase consecutive5xx.. A combination of a longer interval and a higher consecutive error threshold ensures only sustained failures trigger ejection.

Answer

Decrease interval, decrease consecutive5xx.

Answer

Decrease interval, increase consecutive5xx.

Answer

Disable outlierDetection and use only circuitBreaking.

Answer

Increase interval, decrease consecutive5xx.

Question 2

You want to configure a circuit breaker that only allows 100 concurrent requests to a service. Which field is correct?

Accepted Answer

trafficPolicy.connectionPool.http.maxRequests. trafficPolicy.connectionPool.http.http1MaxPendingRequests or maxRequests (in versions) is used to control concurrency.

Answer

trafficPolicy.outlierDetection.maxRequests

Answer

trafficPolicy.connectionPool.http.http2MaxRequests

Answer

trafficPolicy.circuitBreaker.maxRequests

Answer

trafficPolicy.connectionPool.tcp.maxConnections

Question 3

Which TWO of the following are true regarding PeerAuthentication policies?

Accepted Answer

They must be applied in the 'istio-system' namespace to work globally.. They can be applied at mesh, namespace, or workload level, and the mode can be STRICT or PERMISSIVE.

Answer

They cannot be used with sidecar-less ambient mode.

Answer

They validate JWT tokens.

Answer

They support the 'DENY' action.

Question 4

What is the primary function of the 'istio-proxy' container in a pod?

Accepted Answer

Intercepting network traffic. It intercepts all network traffic to and from the application container.

Answer

Running the business logic

Answer

Managing Kubernetes API

Answer

Monitoring disk usage

Question 5

Which THREE settings are part of the 'connectionPool' configuration in a DestinationRule?

Accepted Answer

http. tcp, http, and http2 are the three protocol-specific pools within the connectionPool object.

Answer

grpc

Answer

tls

Question 6

Which TWO settings in a DestinationRule are used for load balancing?

Accepted Answer

loadBalancer.simple. TrafficPolicy includes the load balancing settings for a service.

Answer

connectionPool

Answer

outlierDetection

Answer

trafficPolicy.tls

Question 7

You have a requirement to use a custom JWT claim to authorize users. How can you map this claim in an 'AuthorizationPolicy'?

Accepted Answer

Use the 'when' field with 'key: request.auth.claims[custom-claim]' and 'values' to match.. AuthorizationPolicy supports 'when' conditions to evaluate JWT claims using the 'request.auth.claims' key.

Answer

Use the 'principals' field.

Answer

Use the 'from' field in the 'source' object.

Answer

Use an 'EnvoyFilter' because AuthorizationPolicy does not support claims.

Question 8

Which of the following is true about the 'principals' vs 'source.principals' fields?

Accepted Answer

They refer to the same concept.. They are synonymous in the context of AuthorizationPolicy; 'principals' is a shorthand within the 'source' object for identifying the workload's SPIFFE ID.

Answer

Only 'principals' is valid.

Answer

Only 'source.principals' is valid.

Answer

They refer to different concepts.

Question 9

Which field in a VirtualService can you use to retry a request?

Accepted Answer

retries. The 'retries' field in the HTTP route block allows defining retry attempts and timeout per try.

Answer

attemptCount

Answer

retryPolicy

Answer

faultRetry

Answer

repeat

Question 10

Which TWO of the following are valid HTTP fault injection delay settings?

Accepted Answer

fixedDelay. fixedDelay and percentage are the two required components.

Answer

maxDelay

Answer

randomDelay

Answer

minDelay