> For the complete documentation index, see [llms.txt](https://atomoh.gitbook.io/kubernetes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://atomoh.gitbook.io/kubernetes/en/quiz-collection/networking/cilium/02-ebpf-quiz.md).

# Part 2: eBPF Quiz

> **Supported Version**: Cilium 1.17, Linux Kernel 4.19+ **Last Updated**: February 22, 2026

## eBPF Basic Concepts

1. **What does eBPF stand for?**
   * A) Extended Berkeley Packet Filter
   * B) Enhanced Berkeley Process Filter
   * C) Extended Binary Processing Framework
   * D) Enhanced Backend Processing Function
2. **Where do eBPF programs execute?**
   * A) User Space
   * B) Kernel Space
   * C) Hypervisor
   * D) Container Runtime
3. **What mechanism ensures the safety of eBPF programs?**
   * A) Sandbox
   * B) Virtual Machine
   * C) Static Verifier
   * D) Containerization
4. **What are the kernel events that eBPF programs can attach to called?**
   * A) Triggers
   * B) Hooks
   * C) Event Listeners
   * D) Callbacks
5. **What is used for data sharing between eBPF programs and user space applications?**
   * A) Shared Memory
   * B) Pipes
   * C) BPF Maps
   * D) Sockets

## eBPF and Cilium

6. **What is the main reason Cilium uses eBPF?**
   * A) Implementing networking features without kernel modules
   * B) Providing a better user interface
   * C) Using less memory
   * D) Easier installation process
7. **Which is NOT a feature implemented using eBPF in Cilium?**
   * A) Network policy enforcement
   * B) Service load balancing
   * C) Network packet encryption
   * D) User authentication
8. **Which eBPF feature does Cilium use to replace kube-proxy?**
   * A) XDP (eXpress Data Path)
   * B) TC (Traffic Control) BPF
   * C) Socket BPF
   * D) Tracing BPF
9. **Why is Cilium's eBPF-based load balancing superior to kube-proxy?**
   * A) Supports more service types
   * B) Better user interface
   * C) Lower latency and higher throughput
   * D) Easier configuration
10. **Which is NOT a metric collected using eBPF in Cilium?**
    * A) Network connection status
    * B) Packet drop reasons
    * C) Service response time
    * D) User login time

## eBPF Programming

11. **What language is primarily used to write eBPF programs?**
    * A) Python
    * B) Go
    * C) C
    * D) Rust
12. **Which is NOT a framework for developing eBPF programs?**
    * A) BCC (BPF Compiler Collection)
    * B) libbpf
    * C) bpftrace
    * D) libpcap
13. **Which is NOT a type of eBPF map?**
    * A) Hash Map
    * B) Array Map
    * C) LRU Map
    * D) Graph Map
14. **What is the maximum number of instructions in an eBPF program?**
    * A) 1,000
    * B) 4,096
    * C) 10,000
    * D) Unlimited
15. **What system call is used to load eBPF programs into the kernel?**
    * A) bpf()
    * B) ebpf()
    * C) sysfs()
    * D) ioctl()

## eBPF Performance and Monitoring

16. **What is the main benefit provided by XDP (eXpress Data Path)?**
    * A) Better security
    * B) Easier programming
    * C) Lower latency
    * D) Higher compatibility
17. **What tool is used to monitor the performance of eBPF programs in Cilium?**
    * A) top
    * B) bpftool
    * C) htop
    * D) iotop
18. **What is Cilium's eBPF-based network monitoring tool?**
    * A) Prometheus
    * B) Hubble
    * C) Grafana
    * D) Jaeger
19. **What tool is used to find performance bottlenecks in eBPF programs?**
    * A) strace
    * B) ltrace
    * C) perf
    * D) gdb
20. **What command is used for debugging eBPF programs in Cilium?**
    * A) `cilium bpf`
    * B) `cilium debug`
    * C) `cilium monitor`
    * D) `cilium trace`