Courseiva
Free · No account needed · No credit card

Istio Certified Associate (ICA, CNCF/Linux Foundation) (ICA) Practice Test

234 questions with instant explanations, domain breakdown, and wrong-answer analysis. Built for the real exam.

Instant feedback after each answer
Full explanations included
Domain score breakdown
Real exam: 120 min

Sample questions with explanations

This is exactly what you see during practice — question, options, and a full explanation after you answer.

Q1Advanced Scenariosmedium
Full explanation →

When migrating to the Kubernetes Gateway API in Istio, you define a Gateway resource. Which component is responsible for translating this Gateway resource into Envoy configuration?

istiodCorrect
BThe Kiali operator
CThe Envoy proxy sidecar
DThe ingress-gateway deployment

istiod is the Istio control plane component that watches Gateway API resources (Gateway and HTTPRoute) and translates them into Envoy xDS configuration pushed to the gateway proxy pods. When you define a Gateway resource, istiod's config controller reconciles it and generates the…Read full explanation

Q2Advanced Scenariosmedium
Full explanation →

You are using Kiali to debug a service mesh. You notice a red line between two services. What does this indicate?

AThe services are located in different clusters.
The traffic is encountering high error rates or being blocked by an Istio policy.Correct
CThe service is not part of the mesh.
DThe connection is encrypted using mTLS.

In Kiali's graph view, edge colors encode traffic health: green means healthy, yellow means degraded, and red means the request/response flow is failing. A red line specifically indicates that the destination workload is returning errors (typically 5xx) or that traffic is being d…Read full explanation

Q3Advanced Scenariosmedium
Full explanation →

When using Kubernetes Gateway API with Istio, which resource acts as the entry point for incoming traffic?

AService
GatewayCorrect
CIngress
DHTTPRoute

The Gateway resource defines the entry point, including listeners, ports, and protocols.

What's covered

Questions are tagged by exam domain. Practice a specific domain or mix them all.

Untimed Practice

Answer at your own pace. Explanation and domain tag shown immediately after each answer.

Timed Practice

Countdown timer starts immediately. Results and domain scores shown at the end — just like the real exam.

Why practice here?

Full explanations on every question

Not just the right answer — you get exactly why each wrong option is wrong, so you learn the concept, not the answer.

Domain score breakdown

After each session see your score by exam domain so you know exactly where to focus study time.

100% free, forever

No subscription, no trial, no email wall. Start a session in under 10 seconds.

Exam-style questions

Scenario-based, precise wording, realistic distractors — written to match what you actually see on exam day.

← All ICA questionsICA exam guideStudy guidePractice by domain