ICA Traffic Management Practice Test 8 — 15 Questions

Question 1

What is the benefit of defining a 'sidecar' resource in Istio?

Accepted Answer

Improve proxy performance/memory usage. It restricts the configuration pushed to Envoy to only what the service needs, reducing memory usage.

Answer

Enable mTLS

Answer

Increase security

Answer

Manage routing

Question 2

Which resource is used to provide a unified entry point for multiple services?

Accepted Answer

Gateway. A Gateway resource, when combined with a VirtualService, provides a single ingress point.

Answer

ServiceEntry

Answer

VirtualService

Answer

EnvoyFilter

Question 3

Which THREE fields are found within the 'trafficPolicy' block of a DestinationRule?

Accepted Answer

loadBalancer. loadBalancer, connectionPool, and outlierDetection are the primary components of a trafficPolicy.

Answer

retries

Answer

mirroring

Question 4

You have multiple VirtualServices for the same host. How does Istio determine which one to use?

Accepted Answer

Istio merges them. Istio merges them based on the configuration logic, but you should avoid duplicate rules to prevent unpredictable behavior.

Answer

Alphabetical order

Answer

The one in the default namespace

Answer

The latest one applied

Question 5

Which TWO actions can a VirtualService perform on a request?

Accepted Answer

Rewrite URI. VirtualServices can rewrite paths and redirect traffic.

Answer

Throttle bandwidth

Answer

Define mTLS mode

Answer

Encrypt traffic

Question 6

Which THREE of these are valid reasons to use a ServiceEntry?

Accepted Answer

Expose an external REST API. ServiceEntry is used to expose external APIs, add external databases, or redirect traffic to a different domain entirely.

Answer

Manage Gateway ingress

Answer

Configure mTLS for internal services

Question 7

Which TWO resources are essential for configuring traffic splitting between versions?

Accepted Answer

VirtualService. A VirtualService is required to define the traffic weights, and a DestinationRule is required to define the subsets (versions).

Answer

ServiceEntry

Answer

Sidecar

Answer

Gateway

Question 8

Which TWO settings are configured within the 'outlierDetection' block?

Accepted Answer

interval. consecutive5xxErrors and interval determine how a host is ejected from the load balancing pool.

Answer

maxRetries

Answer

timeout

Answer

weight

Question 9

Which THREE configurations affect the way traffic is distributed across pods?

Accepted Answer

Load balancer policy. Subset definitions, loadBalancer policy, and VirtualService weights all influence distribution.

Answer

Gateway port

Answer

Retry policy

Question 10

Which THREE features are supported by the Istio 'trafficPolicy' in a DestinationRule?

Accepted Answer

Connection pooling. Load balancing, connection pooling, and outlier detection are standard traffic policies.

Answer

Traffic mirroring

Answer

Fault injection

Question 11

Which TWO mechanisms are used to secure traffic within the mesh?

Accepted Answer

PeerAuthentication. PeerAuthentication (for mTLS mode) and AuthorizationPolicy (for access control) are key.

Answer

Gateway

Answer

VirtualService

Answer

ServiceEntry

Question 12

Which THREE are types of traffic management patterns?

Accepted Answer

Canary deployment. Canary deployments, traffic mirroring, and circuit breaking are all core Istio patterns.

Answer

Namespace isolation

Answer

Database sharding

Question 13

Which TWO parameters are used to define a 'match' criteria in a VirtualService?

Accepted Answer

headers. Headers and authority (or URI) are valid match conditions.

Answer

timeout

Answer

subset

Answer

retries

Question 14

Which THREE are valid load balancing policies in Istio?

Accepted Answer

RANDOM. ROUND_ROBIN, LEAST_CONN, and RANDOM are the built-in load balancing policies.

Answer

FAILOVER

Answer

STICKY

Question 15

Which TWO components must be configured to allow external traffic to enter the mesh?

Accepted Answer

VirtualService. A Gateway is required to listen for traffic, and a VirtualService is required to route it to the correct service.

Answer

DestinationRule

Answer

PeerAuthentication

Answer

Sidecar