Advanced Scenarios

When using Istio with Kubernetes Gateway API, which object handles traffic routing rules based on path prefixes?

When using Kiali to debug service communication, which TWO metrics are most useful for identifying performance bottlenecks?

Which command is used to restart an Istio sidecar without restarting the application container?

When using Kubernetes Gateway API with Istio, which resource acts as the entry point for incoming traffic?

In a multi-cluster Istio setup, you notice that service 'A' in cluster 1 cannot communicate with service 'B' in cluster 2, even though 'Cross-Cluster' is enabled. The logs show '404 Not Found'. What is the most likely reason?

When configuring a multi-cluster mesh, what does a 'ServiceEntry' with 'location: MESH_EXTERNAL' signify?

Which THREE items are required to configure mTLS for an external service that is being added to the mesh?

Which THREE configuration areas are essential for ensuring observability in a complex Istio mesh?

You are troubleshooting a service that is failing to communicate with another service in a different namespace. Which TWO of the following items should you check to ensure connectivity?

You need to integrate an external database into the mesh that does not support mTLS. How do you configure it securely?

In a multi-cluster environment with a shared control plane, what is the purpose of the 'istio-remote-secret'?

You observe that your sidecars are crashing due to 'Out of Memory' (OOM). What is a likely configuration error?

Which TWO settings in a DestinationRule are used for load balancing?

When inspecting Envoy stats, what does 'upstream_rq_timeout' represent?

Which THREE of the following are valid ways to control egress traffic in Istio?

When configuring a Gateway API resource, which TWO properties are defined within the 'listeners' block?

You are using Kiali to debug a service mesh. You notice a red line between two services. What does this indicate?

What is the purpose of the 'PILOT_ENABLE_MTLS_OVERRIDE' environment variable in istiod?

Which component in Istio is responsible for collecting telemetry data and sending it to observability tools like Prometheus?

In a multi-primary deployment, you want to ensure that traffic between clusters is encrypted via mTLS. Which resource must be configured on both clusters?

You are implementing multi-tenancy using Istio Namespaces. To ensure strict isolation where Service A in Namespace X cannot send traffic to Service B in Namespace Y, what is the best approach?

What is the result of setting 'outlierDetection' in a DestinationRule?

How can you verify the current configuration being pushed to an Envoy sidecar without using Kiali?

Which THREE components are critical for establishing a secure multi-cluster 'primary-remote' configuration?

What is the primary function of the 'PeerAuthentication' resource?

You notice that your Kiali dashboard shows services as 'missing'. What is a likely cause?

You want to force all traffic to an external service to go through an EgressGateway. What is required?

Which TWO actions can be taken via the 'istioctl' command to debug mesh health?

In a primary-remote multi-cluster deployment with a shared control plane, a remote cluster service is unreachable. You observe the ServiceEntry is created correctly, but the remote cluster does not have the corresponding Service object. What is the most likely cause?

You are debugging a performance issue and suspect Envoy is buffering too much data. Which filter settings might be causing this?

Which Istio component handles the generation of xDS configuration?

You are configuring Jaeger for distributed tracing in Istio. You observe that traces are missing spans for external service calls. What is the most likely cause?

What is the main advantage of using Istio's 'locality-aware load balancing'?

Which tool allows you to perform traffic shifting between two versions of a service?

Which THREE features does the Kubernetes Gateway API offer that are significantly different from legacy Ingress?

In a multi-tenancy setup, which Istio resource should you use to restrict which namespaces a sidecar can see?

Which TWO pieces of information are displayed in the Kiali 'Graph' view?

When designing for high availability in a multi-cluster Istio mesh, which THREE strategies are recommended?

When migrating to the Kubernetes Gateway API in Istio, you define a Gateway resource. Which component is responsible for translating this Gateway resource into Envoy configuration?