ICA Traffic Management — 10 Questions

Question 1

How do you limit the number of active requests to a service?

Accepted Answer

DestinationRule. The connectionPool field in DestinationRule supports maxRequestsPerConnection.

Answer

Gateway

Answer

VirtualService

Answer

ServiceEntry

Question 2

Which command helps you check if a specific VirtualService is active?

Accepted Answer

kubectl get virtualservices. istioctl proxy-config routes <pod-name> will show if the route exists in the proxy.

Answer

kubectl logs

Answer

istioctl get routes

Answer

istioctl check

Question 3

What are valid statuses returned by outlierDetection? (Choose THREE)

Accepted Answer

consecutiveGatewayErrors. Outlier detection tracks consecutive errors and success rates to decide if a host should be ejected.

Answer

http1MaxPendingRequests

Answer

maxConnections

Question 4

Which components are part of the Istio control plane? (Choose TWO)

Accepted Answer

Kubernetes API. istiod is the core component of the Istio control plane.

Answer

Kiali

Answer

Ingress Gateway

Answer

Envoy

Question 5

Which are valid TLS modes in PeerAuthentication? (Choose TWO)

Accepted Answer

PERMISSIVE. Valid mTLS modes are STRICT and PERMISSIVE.

Answer

REQUIRED

Answer

DISABLE

Answer

ENABLED

Question 6

To enable mTLS between services, which resource must be created to define the connection settings?

Accepted Answer

DestinationRule. DestinationRule defines the trafficPolicy, including the tls settings for mTLS.

Answer

PeerAuthentication

Answer

VirtualService

Answer

Gateway

Question 7

Which THREE components are involved in setting up fault injection for testing?

Accepted Answer

Application Service. VirtualService (for the rule), DestinationRule (for the target), and the application itself to experience the injected fault.

Answer

Gateway

Answer

EnvoyFilter

Question 8

You need to route 10% of traffic to a new version of your service. Which object do you configure?

Accepted Answer

VirtualService. VirtualService allows weight-based routing to different subsets.

Answer

DestinationRule

Answer

ServiceEntry

Answer

Gateway

Question 9

Which THREE settings are required in a VirtualService for a canary deployment?

Accepted Answer

http routes. Canary deployments require host definition, http/tcp route definitions, and weight assignments.

Answer

tcp

Answer

tls

Question 10

You need to enforce a 5-second timeout on all calls to a specific service. Where is this configured?

Accepted Answer

VirtualService. Timeouts are a property of the route in a VirtualService.

Answer

Gateway

Answer

DestinationRule

Answer

ServiceEntry