ICA Traffic Management Practice Test 6 — 15 Questions

Question 1

Which of these are valid sub-commands for istioctl? (Choose TWO)

Accepted Answer

analyze. istioctl analyze and istioctl proxy-config are valid commands.

Answer

restart

Answer

start

Answer

debug

Question 2

Which of the following are valid DestinationRule fields? (Choose THREE)

Accepted Answer

host. DestinationRule includes host, trafficPolicy, and subsets.

Answer

redirect

Answer

match

Question 3

Which are valid connectionPool settings? (Choose THREE)

Accepted Answer

http2. connectionPool allows settings for tcp, http, and http2.

Answer

grpc

Answer

udp

Question 4

What are the primary ways to limit traffic to a service? (Choose TWO)

Accepted Answer

VirtualService. You can use VirtualService (for routing) and DestinationRule (for circuit breaking/load balancing).

Answer

Gateway

Answer

ServiceEntry

Answer

Sidecar

Question 5

Which are valid match conditions in VirtualService? (Choose THREE)

Accepted Answer

headers. Match conditions include headers, uri, and port.

Answer

timeout

Answer

weight

Question 6

Which commands verify Istio configurations? (Choose TWO)

Accepted Answer

istioctl analyze. istioctl analyze and istioctl proxy-config are used for verification.

Answer

istioctl check-config

Answer

kubectl verify

Answer

kubectl status

Question 7

Which are valid uses for ServiceEntry? (Choose THREE)

Accepted Answer

Configure external TLS. ServiceEntry is used for external service registry, TLS for external hosts, and DNS resolution.

Answer

Load balance ingress

Answer

Limit mesh size

Question 8

To perform a canary deployment, you have two versions of a service. Which resource do you use to split traffic between them?

Accepted Answer

VirtualService. VirtualService supports weight-based routing to split traffic between subsets.

Answer

DestinationRule

Answer

Gateway

Answer

Sidecar

Question 9

You need to expose a service to traffic outside the mesh using Istio. Which resource is required to configure the entry point for incoming traffic?

Accepted Answer

Gateway. The Gateway resource describes a load balancer operating at the edge of the mesh.

Answer

ServiceEntry

Answer

VirtualService

Answer

DestinationRule

Question 10

How do you implement a circuit breaker to eject a pod that returns 5xx errors?

Accepted Answer

DestinationRule outlierDetection. OutlierDetection within the DestinationRule manages circuit breaking by ejecting unhealthy instances.

Answer

PeerAuthentication

Answer

VirtualService fault injection

Answer

VirtualService retry policy

Question 11

You want to access an external API (e.g., api.google.com) from within your mesh. What must you configure?

Accepted Answer

ServiceEntry. ServiceEntry allows adding entries to the Istio internal service registry for external endpoints.

Answer

DestinationRule

Answer

VirtualService

Answer

EnvoyFilter

Question 12

You have a service that occasionally hangs. You want to ensure that if a request takes longer than 2 seconds, it fails immediately. Which field do you configure?

Accepted Answer

timeout. The timeout field in the HTTPRoute of a VirtualService dictates the deadline.

Answer

delay

Answer

maxConnections

Answer

maxRetries

Question 13

Which field in the VirtualService allows you to redirect traffic to a different URI?

Accepted Answer

redirect. The redirect field within the HTTPRoute allows URI or authority changes.

Answer

delegate

Answer

mirror

Answer

rewrite

Question 14

You want to route traffic to a specific version of a service based on a header. Where do you define the subset?

Accepted Answer

DestinationRule. Subsets are defined in the DestinationRule to map labels to specific versions.

Answer

Gateway

Answer

ServiceEntry

Answer

VirtualService

Question 15

What is the function of the 'weight' parameter in a VirtualService route?

Accepted Answer

To split traffic between multiple destinations. Weight determines the percentage of traffic directed to a specific destination.

Answer

To specify the TTL of a request

Answer

To limit bandwidth usage

Answer

To set the priority of a rule