How should I use these Traffic Management practice questions?

Read each scenario carefully and choose your answer before revealing the explanation. Then check why your choice was right or wrong. Repeat until the reasoning feels automatic.

Can I practise just Traffic Management questions in a focused session?

Yes — use the session launcher on this page to start a 10-, 20-, 30- or 50-question session drawn entirely from the Traffic Management domain.

ICA · topic practice

Traffic Management practice questions

Practise Istio Certified Associate (ICA, CNCF/Linux Foundation) (ICA) Traffic Management practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

Courseiva uses original exam-style practice questions designed for learning and revision. The goal is to understand the concepts, recognise exam patterns, and improve through explanations — not memorise copied exam dumps.

Reviewed byJohnson Ajibi· MSc IT Security

20 questionsDomain: Traffic Management

Practice 10 questions Browse domain →

What the exam tests

What to know about Traffic Management

Traffic Management questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Watch out for

Common Traffic Management exam traps

▸Answering from memory before reading the full scenario.
▸Missing a constraint such as cost, availability, security, scope or command context.
▸Choosing a broad answer when the question asks for the most specific fix.
▸Ignoring why the wrong options are tempting.

Practice set

Traffic Management questions

20 questions · select your answer, then reveal the explanation

Question 1hardmultiple choice

Read the full Traffic Management explanation →

How do you limit the number of active requests to a service?

Trap 1: Gateway

Gateway handles ingress ports.

Trap 2: VirtualService

VirtualService doesn't set connection limits.

Trap 3: ServiceEntry

ServiceEntry is for discovery.

Study all Traffic Management common traps →

A
Gateway
Why wrong: Gateway handles ingress ports.
B
VirtualService
Why wrong: VirtualService doesn't set connection limits.
C
DestinationRule
DestinationRule defines connection pool settings.
D
ServiceEntry
Why wrong: ServiceEntry is for discovery.

Traffic Management practice questions

What to know about Traffic Management

Common Traffic Management exam traps

Traffic Management questions

How do you limit the number of active requests to a service?

Which command helps you check if a specific VirtualService is active?

What are valid statuses returned by outlierDetection? (Choose THREE)

Which components are part of the Istio control plane? (Choose TWO)

Which are valid TLS modes in PeerAuthentication? (Choose TWO)

To enable mTLS between services, which resource must be created to define the connection settings?

Which THREE components are involved in setting up fault injection for testing?

You need to route 10% of traffic to a new version of your service. Which object do you configure?

Which THREE settings are required in a VirtualService for a canary deployment?

You need to enforce a 5-second timeout on all calls to a specific service. Where is this configured?

Which TWO fields are mandatory in a Gateway resource?

You need to expose an application running in the mesh to traffic from outside the cluster. Which resource is required to define the entry point?

A DestinationRule is configured with a 'v1' subset but traffic is failing. Where should you check for the label match?

A team wants to perform a canary deployment by shifting 10% of traffic to a new version of their service. Which resource allows this weighting?

You have an external dependency that is not in the Kubernetes registry. How do you allow the mesh services to communicate with it?

You want to enforce mTLS globally for all services in the cluster. Which resource should you apply?

Which command is used to view the current Istio configuration resources in a namespace?

When configuring a retry policy for a VirtualService, which parameter defines the maximum time allowed for a single attempt?

What is the default Istio load balancing algorithm?

To ensure traffic to a service is encrypted via mTLS, where should you verify the policy?

Track your progress over time

Start a Traffic Management only practice session

Related ICA topic practice pages

Advanced Scenarios practice questions

Istio Installation Upgrade And Configuration practice questions

Resilience And Fault Injection practice questions

Securing Workloads practice questions

Traffic Management practice questions

ICA fundamentals practice questions

ICA scenario practice questions

ICA troubleshooting practice questions

Frequently asked questions

Track your progress

Study resources

Exam traps to avoid