KCNA Service Mesh 2

Question 1

Which component in Istio is responsible for enforcing traffic policies at the data plane?

Accepted Answer

Envoy sidecar proxy

Answer

Envoy sidecar proxies are the data plane components that intercept and enforce traffic policies in Istio.

Question 2

What is the primary purpose of a VirtualService resource in Istio?

Accepted Answer

Configure traffic routing rules for a service

Answer

A VirtualService defines how requests are routed to a service, enabling traffic splitting, retries, and fault injection.

Question 3

Which service mesh feature allows you to test application resilience by injecting delays or errors into requests?

Accepted Answer

Fault injection

Answer

Fault injection lets you deliberately introduce delays or HTTP errors to test how your application handles failures.

Question 4

What does an Istio DestinationRule primarily configure?

Accepted Answer

Policies applied to traffic after routing, such as load balancing and TLS settings

Answer

DestinationRule configures policies like connection pooling, load balancing algorithms, and TLS for traffic destined for a service.

Question 5

In a service mesh, what is 'traffic mirroring' (also called shadowing) used for?

Accepted Answer

Duplicating traffic to a secondary service for testing without affecting production responses

Answer

Traffic mirroring sends a copy of live traffic to a mirror service so you can test new versions without impacting production users.

(KCNA) Kubernetes and Cloud Native Associate Practice Test