> For the complete documentation index, see [llms.txt](https://atomoh.gitbook.io/kubernetes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://atomoh.gitbook.io/kubernetes/en/quiz-collection/networking/cilium/07-advanced-topics-quiz.md).

# Part 7: Advanced Topics Quiz

> **Supported Version**: Cilium 1.17 **Last Updated**: February 22, 2026

## eBPF Technology

1. **Where do eBPF programs run?**
   * A) User Space
   * B) Kernel Space
   * C) Inside containers
   * D) Inside virtual machines
2. **What mechanism ensures the safety of eBPF programs?**
   * A) Virtualization
   * B) Containerization
   * C) Static Verifier
   * D) Encryption
3. **Which is NOT a main benefit of using eBPF in Cilium?**
   * A) Implementing networking features without kernel modules
   * B) High performance and low overhead
   * C) Fine-grained network policy enforcement
   * D) Hardware acceleration required

## Networking Models

4. **Which data path mode is NOT supported by Cilium?**
   * A) VXLAN
   * B) Geneve
   * C) Direct Routing
   * D) MPLS
5. **What technology does Cilium use in kube-proxy replacement mode?**
   * A) iptables
   * B) IPVS
   * C) eBPF-based XDP
   * D) netfilter
6. **What feature in Cilium's network model tracks packet paths during Pod-to-Pod communication?**
   * A) tcpdump
   * B) Hubble Flow Monitoring
   * C) Wireshark
   * D) Prometheus

## IPAM and Network Policies

7. **Which IPAM (IP Address Management) mode in Cilium integrates with AWS EKS?**
   * A) Cluster Pool
   * B) Kubernetes Host Scope
   * C) AWS ENI
   * D) CRD-based
8. **What does the 'toFQDNs' rule allow in Cilium network policies?**
   * A) Traffic to specific IP addresses
   * B) Traffic to specific ports
   * C) Traffic to specific domain names
   * D) Traffic of specific protocols
9. **Which selector is NOT supported in Cilium CiliumNetworkPolicy?**
   * A) endpointSelector
   * B) nodeSelector
   * C) namespaceSelector
   * D) serviceSelector

## L2-L7 Networking

10. **Which attribute cannot be filtered by Cilium's L7 policies for HTTP requests?**
    * A) Path
    * B) Method
    * C) Headers
    * D) Response Time
11. **What is NOT provided by Cilium's Service Mesh features?**
    * A) Mutual TLS (mTLS)
    * B) Traffic Splitting
    * C) Service Discovery
    * D) User Authentication
12. **What functionality does Cilium's Envoy integration provide?**
    * A) L7 load balancing
    * B) L7 visibility
    * C) L7 policy enforcement
    * D) All of the above

## Security and Visibility

13. **Which feature is NOT provided by Hubble UI?**
    * A) Service dependency map
    * B) Network flow visualization
    * C) Policy violation alerts
    * D) Code deployment management
14. **Which protocols can be used for network traffic encryption in Cilium?**
    * A) IPsec and WireGuard
    * B) TLS and SSH
    * C) SSL and HTTPS
    * D) DTLS and QUIC
15. **Which Cilium security feature matches this description? "Filters traffic based on specific fields or patterns of specific application layer protocols"**
    * A) Network policies
    * B) L7 policies
    * C) Encryption
    * D) Intrusion detection

## Advanced Topics and Real-World Use Cases

16. **Which is NOT a main feature of Cilium Cluster Mesh?**
    * A) Cross-cluster service discovery
    * B) Cross-cluster network policies
    * C) Cross-cluster load balancing
    * D) Cross-cluster storage sharing
17. **What does Cilium's Bandwidth Manager feature provide?**
    * A) Network bandwidth monitoring
    * B) Network bandwidth limiting and QoS
    * C) Network bandwidth optimization
    * D) Network bandwidth prediction
18. **What does Cilium's Host Firewall feature protect?**
    * A) Container-to-container communication only
    * B) Node-to-node communication only
    * C) The host's own network interfaces
    * D) External cloud services
19. **What is the main purpose of Cilium's Egress Gateway feature?**
    * A) Preserving the source IP address of external traffic
    * B) Changing the destination IP address of external traffic
    * C) Encrypting external traffic
    * D) Blocking external traffic
20. **What is NOT possible through Cilium's BGP support?**
    * A) Route exchange with external routers
    * B) Advertising external IPs for LoadBalancer services
    * C) Direct routing between clusters
    * D) Automatic DNS record creation

## Performance and Troubleshooting

21. **Which Cilium performance optimization technology significantly reduces packet processing latency?**
    * A) TCP BBR
    * B) XDP (eXpress Data Path)
    * C) DPDK
    * D) TSO (TCP Segmentation Offload)
22. **What is the command to diagnose network connectivity issues in Cilium?**
    * A) `cilium status`
    * B) `cilium connectivity test`
    * C) `cilium monitor`
    * D) `cilium endpoint list`
23. **What is the command to check the network policy status of a specific Pod in Cilium?**
    * A) `cilium endpoint list`
    * B) `cilium policy get`
    * C) `cilium endpoint get <endpoint-id>`
    * D) `cilium status --all-endpoints`
24. **What is the command to check BPF map status in Cilium?**
    * A) `cilium map list`
    * B) `cilium bpf maps`
    * C) `cilium status --maps`
    * D) `cilium bpf map list`
25. **What is the command for network packet capture and analysis in Cilium?**
    * A) `cilium tcpdump`
    * B) `cilium capture`
    * C) `cilium monitor`
    * D) `cilium packet-capture`