ICA Traffic Management Practice Test 4 — 15 Questions

Question 1

Which type of routing allows you to route to different services based on URL path?

Accepted Answer

VirtualService. VirtualService 'match' can use 'uri' with 'prefix' or 'exact' matches to route to different services.

Answer

DestinationRule

Answer

Gateway

Answer

ServiceEntry

Question 2

You need to route traffic for an external service that uses TLS. How do you configure the ServiceEntry?

Accepted Answer

By creating a ServiceEntry with resolution DNS. The ServiceEntry must define resolution and location, and the destination port must specify the protocol.

Answer

By using an EnvoyFilter

Answer

By creating a Gateway

Answer

Using a VirtualService only

Question 3

Which field in the VirtualService allows you to redirect an incoming request to a different path?

Accepted Answer

redirect. The 'redirect' field in the VirtualService route allows for URI or authority redirection.

Answer

rewrite

Answer

mirror

Answer

match

Question 4

What is the purpose of 'istioctl analyze'?

Accepted Answer

Identify configuration issues. To identify configuration issues across the mesh.

Answer

Scale deployments

Answer

Check proxy version

Answer

Visualize traffic

Question 5

If you want to perform traffic shadowing, which field do you use?

Accepted Answer

mirror. The mirror field in a VirtualService enables traffic shadowing.

Answer

redirect

Answer

weight

Answer

fault

Question 6

How do you configure an Istio Gateway to handle HTTPS?

Accepted Answer

Gateway. A Gateway requires a 'servers' block with 'tls' settings and a reference to a Kubernetes secret.

Answer

DestinationRule

Answer

VirtualService

Answer

ServiceEntry

Question 7

What is the default behavior when no VirtualService is defined for a service?

Accepted Answer

Round-robin routing. Istio routes traffic to all available pods in the service in a round-robin fashion.

Answer

Traffic is dropped

Answer

503 error

Answer

Traffic is blocked

Question 8

Which tool provides a GUI for visualizing your traffic management rules?

Accepted Answer

Kiali. Kiali is the standard visualization tool for Istio.

Answer

Prometheus

Answer

Grafana

Answer

istioctl

Question 9

What happens if you have two VirtualServices for the same host?

Accepted Answer

They are merged. Istio merges them if possible, or the behavior is undefined/conflicting depending on the match criteria.

Answer

The last one wins

Answer

Both ignored

Answer

Error thrown

Question 10

What is the standard path to install istioctl?

Accepted Answer

Binary download. Downloading the binary from the Istio release page is the standard method.

Answer

apt-get

Answer

kubectl plugin

Answer

npm install

Question 11

Which resource type is used for mTLS policy?

Accepted Answer

PeerAuthentication. PeerAuthentication is the specific CRD for mTLS.

Answer

VirtualService

Answer

DestinationRule

Answer

Gateway

Question 12

You need to route traffic to a service based on the 'x-user-type' header. How is this defined?

Accepted Answer

VirtualService match. The match field in a VirtualService can include a 'headers' condition with exact or regex matching.

Answer

ServiceEntry

Answer

DestinationRule subset

Answer

Gateway host

Question 13

How do you define a regex match in a VirtualService?

Accepted Answer

regex field. The match block URI uses the 'regex' field for pattern matching.

Answer

uri-regex

Answer

match-regex

Answer

pattern field

Question 14

How do you force a connection pool to use HTTP/1.1 instead of HTTP/2?

Accepted Answer

DestinationRule. The http1MaxPendingRequests field in DestinationRule is used, but protocol selection is often automatic; for specific tuning, use connectionPool.

Answer

VirtualService

Answer

Gateway

Answer

ServiceEntry

Question 15

What is the purpose of the 'istio-system' namespace?

Accepted Answer

Control plane. It contains the Istio control plane components.

Answer

Ingress only

Answer

App storage

Answer

Proxy logs