Sample questions
Istio Certified Associate (ICA, CNCF/Linux Foundation) (ICA) practice questions
What is the main advantage of using Istio's 'locality-aware load balancing'?
An application is experiencing intermittent errors. You decide to use outlier detection to eject unhealthy pods. Which field in the DestinationRule controls the ejection of hosts a…
When configuring circuit breaking, what does 'maxRequestsPerConnection' control?
What is the primary function of the 'PeerAuthentication' resource?
You need to integrate an external database into the mesh that does not support mTLS. How do you configure it securely?
You want to simulate a 5-second network latency for 10% of requests to the 'cart' service. Which VirtualService configuration is correct?
How do you define a circuit breaker that limits the number of pending requests?
When inspecting Envoy stats, what does 'upstream_rq_timeout' represent?
Which THREE fields in an AuthorizationPolicy are evaluated under the 'rules' section?
If you set 'mode: PERMISSIVE' in PeerAuthentication, what does this allow?
When using Kubernetes Gateway API with Istio, which resource acts as the entry point for incoming traffic?
In a multi-tenancy setup, which Istio resource should you use to restrict which namespaces a sidecar can see?
When using Istio with Kubernetes Gateway API, which object handles traffic routing rules based on path prefixes?
Which THREE of the following are valid ways to control egress traffic in Istio?
Which component is responsible for the actual enforcement of circuit breaking and fault injection?
What is the default value for 'consecutive5xx' in OutlierDetection?
In a multi-primary deployment, you want to ensure that traffic between clusters is encrypted via mTLS. Which resource must be configured on both clusters?
Which component in Istio is responsible for collecting telemetry data and sending it to observability tools like Prometheus?
Which command is used to restart an Istio sidecar without restarting the application container?
Which TWO actions can be taken via the 'istioctl' command to debug mesh health?
When configuring a multi-cluster mesh, what does a 'ServiceEntry' with 'location: MESH_EXTERNAL' signify?
Which THREE items are required to configure mTLS for an external service that is being added to the mesh?
Which of the following is true regarding Outlier Detection in Istio?
Which TWO are common causes for a service to be ejected by Outlier Detection?