> For the complete documentation index, see [llms.txt](https://atomoh.gitbook.io/kubernetes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://atomoh.gitbook.io/kubernetes/en/quiz-collection/networking/cilium/06-security-visibility-quiz.md).

# Part 6: Security and Visibility Quiz

> **Supported Version**: Cilium 1.17 **Last Updated**: February 22, 2026

## Network Policy Basics

1. **What is the main difference between Kubernetes NetworkPolicy and Cilium NetworkPolicy?**
   * A) Cilium NetworkPolicy does not support L7 policies
   * B) Kubernetes NetworkPolicy does not support L7 policies
   * C) Cilium NetworkPolicy can only be applied to specific nodes
   * D) Kubernetes NetworkPolicy provides higher performance
2. **What is the API group for Cilium NetworkPolicy?**
   * A) networking.k8s.io
   * B) cilium.io
   * C) policy.cilium.io
   * D) network.cilium.io
3. **What is the role of 'endpointSelector' in Cilium NetworkPolicy?**
   * A) Selects target Pods to which the policy applies
   * B) Selects target nodes to which the policy applies
   * C) Selects target namespaces to which the policy applies
   * D) Selects target services to which the policy applies
4. **What does the 'ingress' rule control in Cilium NetworkPolicy?**
   * A) Incoming traffic to selected Pods
   * B) Outgoing traffic from selected Pods
   * C) Internal traffic within selected Pods
   * D) Traffic to outside the cluster
5. **What does the 'egress' rule control in Cilium NetworkPolicy?**
   * A) Incoming traffic to selected Pods
   * B) Outgoing traffic from selected Pods
   * C) Internal traffic within selected Pods
   * D) Traffic from outside the cluster

## L7 Policies

6. **Which attribute cannot be filtered in Cilium's L7 HTTP policies?**
   * A) Path
   * B) Method
   * C) Headers
   * D) Response Time
7. **Which attribute can be filtered in Cilium's L7 Kafka policies?**
   * A) Topic
   * B) Partition
   * C) Offset
   * D) All of the above
8. **What does the 'matchPattern' rule allow in Cilium's L7 DNS policies?**
   * A) Exact domain name matching
   * B) Domain name pattern matching with wildcards
   * C) IP address matching
   * D) Port number matching
9. **What component is required to apply Cilium's L7 policies?**
   * A) kube-proxy
   * B) Envoy proxy
   * C) NGINX ingress controller
   * D) HAProxy
10. **Which protocol is NOT supported by Cilium's L7 policies?**
    * A) HTTP
    * B) gRPC
    * C) Kafka
    * D) SMTP

## Encryption and Security

11. **Which protocols can be used for network traffic encryption in Cilium?**
    * A) IPsec
    * B) WireGuard
    * C) Both A and B
    * D) TLS
12. **What traffic does Cilium's encryption feature protect?**
    * A) Inter-node traffic only
    * B) Inter-pod traffic only
    * C) Node-to-pod traffic only
    * D) All cluster traffic
13. **What does Cilium's Host Firewall feature protect?**
    * A) Pod network interfaces
    * B) Host network interfaces
    * C) Service endpoints
    * D) Container runtime
14. **Which Cilium security feature matches this description? "Filters traffic based on specific fields or patterns of specific application layer protocols"**
    * A) Network policies
    * B) L7 policies
    * C) Encryption
    * D) Intrusion detection
15. **What is Cilium's Identity-based security model based on?**
    * A) Pod name
    * B) Node name
    * C) Labels
    * D) IP address

## Visibility and Monitoring

16. **What is Hubble?**
    * A) Cilium's network visibility tool
    * B) Cilium's load balancer
    * C) Cilium's encryption protocol
    * D) Cilium's DNS server
17. **Which feature is NOT provided by Hubble UI?**
    * A) Service dependency map
    * B) Network flow visualization
    * C) Policy violation alerts
    * D) Code deployment management
18. **What is the command to observe network flows for a specific Pod using Hubble CLI?**
    * A) `hubble observe --pod <pod-name>`
    * B) `hubble watch --pod <pod-name>`
    * C) `hubble monitor --pod <pod-name>`
    * D) `hubble inspect --pod <pod-name>`
19. **Which metric is NOT collected by Hubble?**
    * A) HTTP status codes
    * B) TCP connection status
    * C) Dropped packet count
    * D) Container CPU usage
20. **How do you integrate Cilium with Prometheus?**
    * A) Add Prometheus annotations to Cilium Operator
    * B) Install Cilium plugin on Prometheus server
    * C) Create ServiceMonitor resource for Cilium
    * D) Import Cilium dashboard to Prometheus