ICA · domain
Resilience And Fault Injection
This domain covers Istio's resilience features: traffic policies for circuit breaking, outlier detection, retries, and timeouts, plus fault injection with HTTP abort and delay. Questions test where each setting lives (DestinationRule vs VirtualService), how the two resources interact, and which fields control connection-pool and ejection behavior.
Focused practice
Practice Resilience And Fault Injection questions
Scored sessions drawing only from this domain — pick a length below.
Start 20-question practice test →What this domain covers
What to know about Resilience And Fault Injection
Be able to place each resilience control correctly: connectionPool and outlierDetection in DestinationRule, timeouts, retries, and fault injection in VirtualService. The key skill is knowing which resource and field enforces circuit breaking versus request-level timeouts and retries.
Configuring connectionPool limits in a DestinationRule to cap concurrent connections and pending requests
Setting VirtualService http timeout and retries fields to bound request duration and retry attempts
Tuning outlier detection via consecutive5xxErrors, interval, baseEjectionTime, and maxEjectionPercent
Injecting faults with VirtualService http fault abort (HTTP status) and delay (fixed duration)
Watch out for
Common Resilience And Fault Injection exam traps
- ▸Putting circuit-breaking connectionPool settings in the VirtualService instead of the DestinationRule, where they actually belong
- ▸Confusing retries with timeouts, or setting a per-try timeout that exceeds the overall request timeout
- ▸Assuming outlier detection ejects hosts permanently; ejection is temporary and governed by baseEjectionTime and maxEjectionPercent
Question index
All Resilience And Fault Injection questions (42)
Click any question to see the full explanation, or start a practice session above.
Which THREE fields are found in the 'http' connectionPool configuration?
Medium2You want to limit the number of concurrent connections to the 'payment' service to 100. Where is this configuration set?
Medium3What happens if a request times out in Istio?
Medium4You want to configure your microservice to be more resilient. Which THREE of the following are valid fields within an 'outlierDetection' policy in a DestinationRule?
Medium5What is the default value for 'consecutive5xx' in OutlierDetection?
Medium6You need to limit the number of concurrent connections to the 'orders' service. Which field in the DestinationRule do you configure?
Easy7You are reviewing a VirtualService for the 'reviews' service. The service has a timeout of 5 seconds configured. You want to ensure that if a request takes longer than 5 seconds, it is aborted with a 504 Gateway Timeout. Which field in the VirtualService should you configure?
Easy8You need to limit the number of concurrent connections to the 'order-service' to prevent cascading failures. Which Istio resource should you configure?
Medium9How do you specify the percentage of traffic that should experience a fault?
Easy10Which TWO are common causes for a service to be ejected by Outlier Detection?
Easy11What is the consequence of having a timeout that is shorter than the average latency of the service?
Medium12Which of the following describes the difference between Circuit Breaking and Outlier Detection?
Hard13Which of the following is a valid method for performing fault injection?
Easy14You want to ensure that a request to the 'search' service fails fast if it takes longer than 2 seconds. How is this configured?
Medium15What is the recommended way to test fault injection in a production environment?
Medium16You want to ensure that a pod is only ejected if it fails consistently. Which setting is most appropriate?
Hard17To test how your application handles service unavailability, you want to return an HTTP 503 error for 20% of requests to the 'catalog' service. Which fault injection setting do you use?
Medium18What is the primary purpose of adding a timeout to a service call?
Easy19A service is returning 5xx errors frequently. You want to eject instances that return 5 consecutive 5xx errors. Which OutlierDetection setting is required?
Hard20Which field defines how long an ejected pod remains out of the rotation?
Medium21A platform team is implementing a resilience strategy for the 'checkout' service. They want to configure a DestinationRule that ejects unhealthy hosts, and they also want to ensure that the ejection does not remove too many hosts at once. Which TWO settings in the OutlierDetection configuration directly control how many hosts can be ejected and how long they remain ejected? (Choose two.)
Hard22Which THREE things happen when a request fails and a retry policy is active?
Hard23A cluster administrator wants to limit the number of concurrent connections and pending requests that the sidecar will allow to the 'shipping' service. The team also wants to configure a circuit breaker that trips when the number of pending requests exceeds a threshold. Where should these settings be defined?
Easy24An application is experiencing intermittent errors. You decide to use outlier detection to eject unhealthy pods. Which field in the DestinationRule controls the ejection of hosts after a certain number of 5xx errors?
Easy25You need to ensure that a request to the 'orders' service times out if it takes longer than 2 seconds. Which field in the VirtualService should you configure?
Easy26You have a DestinationRule with outlier detection enabled. If a host returns 5 consecutive 5xx errors and the 'interval' is set to 1s, what happens if 'baseEjectionTime' is 30s?
Hard27How do you define a circuit breaker that limits the number of pending requests?
Hard28Which THREE settings are part of the 'outlierDetection' configuration in a DestinationRule?
Medium29Which TWO parameters affect the 'aggressiveness' of Outlier Detection?
Hard30Which TWO of the following are valid fields within a DestinationRule's 'trafficPolicy'?
Easy31You notice that a pod is being ejected by Outlier Detection despite only having occasional errors. How do you increase the interval between ejection scans?
Hard32Which resource is used to configure circuit breaking for a service?
Easy33What happens when a circuit breaker trips?
Medium34Which component is responsible for the actual enforcement of circuit breaking and fault injection?
Medium35Where do you define the connection pool settings for a service?
Easy36In OutlierDetection, what is the effect of setting 'maxEjectionPercent' to 0?
Hard37When configuring circuit breaking, what does 'maxRequestsPerConnection' control?
Medium38Can you configure fault injection for specific traffic patterns, such as user headers?
Easy39Which TWO of the following are valid fault injection types in Istio?
Medium40Which THREE settings are part of the 'connectionPool' configuration in a DestinationRule?
Hard41To test the resilience of your microservice architecture, you want to introduce a 5-second delay to 50% of the requests directed to the 'catalog-service'. Where do you define this configuration?
Hard42You configure a VirtualService for the 'payments' service with an HTTP route that applies a retry policy of 3 attempts with a 2s perTryTimeout, and a global timeout of 5s. During peak load, callers report that requests fail after roughly 5 seconds even though some retries were still in flight. Which behavior of the global timeout explains this?
HardOther domains
All ICA exam domains
Frequently asked questions
- What does the Resilience And Fault Injection domain cover on the ICA exam?
- Be able to place each resilience control correctly: connectionPool and outlierDetection in DestinationRule, timeouts, retries, and fault injection in VirtualService. The key skill is knowing which resource and field enforces circuit breaking versus request-level timeouts and retries.
- How many questions are in this domain?
- This page lists all 42 Resilience And Fault Injection questions in the ICA question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
- What is the best way to practise this domain?
- Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
- Can I practise only Resilience And Fault Injection questions?
- Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.