Priya Dogra – Certification | Jobs | Internships
Enroll Here: Beyond the Basics: Istio and IBM Cloud Kubernetes Service Cognitive Class Exam Quiz Answers
Beyond the Basics: Istio and IBM Cloud Kubernetes Service Cognitive Class Certification Answers
Lab 1 – Observe Service Telemetry Quiz Answers – Cognitive Class
Question 1: You must modify your apps to get metrics for those apps.
- True
- False
Question 2: You must modify your apps to get distributed tracing for those apps to work properly.
- True
- False
Question 3: What distributed tracing system does Istio support by default?
- Zipkin
- Kibana
- LogStash
- Jaeger
Question 4: In a SOA architecture that uses tradtional debugging techniques, as requests pass through multiple services, identifying performance bottlenecks becomes increasingly difficult.
- True
- False
Lab 2 – Expose the Service Mesh with Istio Ingress Controller Quiz Answers – Cognitive Class
Question 1: The components deployed on the service mesh by default are not exposed outside the cluster.
- True
- False
Question 2: In a Kubernetes environment, Istio uses what component to configure ingress behavior?
- Microservices Ingress controller
- Kubernetes Ingress Resources
- Cloud Ingress Resources
- Resource controller
Question 3: Ingress can provide load balancing, SSL termination, and name-based virtual hosting.
- True
- False
Question 4: What is an ingress?
- A collection of services
- A collection of pods
- A collection of rules
- A collection of clusters
Lab 3 – Manage Traffic Quiz Answers – Cognitive Class
Question 1: Where are routing rules defined?
- VirtualService
- VirtualRule
- DestinationRule
- ServiceEntry
Question 2: Where are service versions (subsets) defined?
- VirtualService
- DestinationRule
- ServiceEntry
- DestinationService
Question 3: Which Istio component is responsible for sending traffic management configurations to Istio sidecars?
- Mixer
- Citadel
- Pilot
- Kubernetes
Question 4: A ServiceEntry rule describes which of the following three items?
- Ports
- Traffic policies
- Endpoints
- Protocols
Lab 4 – Secure Your Service Quiz Answers – Cognitive Class
Question 1: Citadel provides each microservice with a strong, cryptographic identity in the form of a certificate. The certificate’s lifecycle is fully managed by Istio.
- True
- False
Question 2: Istio provides microservices with mutually authenticated connections without requiring app code changes.
- True
- False
Question 3: Mutual authentication must be on or off for the entire cluster; gradual adoption is not possible.
- True
- False
Question 4: Citadel is not directly responsible for which one of these items?
- Provides each service with an identity representing its role
- Provides connections to exchange and validate certificates
- Provides a common trust root to allow Envoys to validate and authenticate each other
- Provides a key management system, automating generation, distribution, and rotation of certificates and keys
Lab 5 – Enforce Policies for Microservices Quiz Answers – Cognitive Class
Question 1: Creating Mixer rules requires app code changes.
- True
- False
Question 2: What is the name of the custom code that interacts with the back-end system, such as Prometheus?
- Rule
- Instance
- Adapter
- Service
Question 3: Istio Mixer moves policy decisions under operator control rather than into configuration.
- True
- False
Question 4: Mixer is not responsible for interfacing with the back-end systems.
- True
- False
Beyond the Basics: Istio and IBM Cloud Kubernetes Service Final Exam Answers – Cognitive Class
Question 1: What is a service mesh?
- One or more containers
- A group of nodes
- A network of microservices
- A type of authentication system
Question 2: Which of these features is provided by Istio? Select all the apply.
- Traffic management
- Telemetry
- Policy enforcement
- Machine learning
- Mutual TLS
- App monetization
Question 3: Microservices that are deployed in Istio can communicate to services outside of Istio.
- True
- False
Question 4: Which Istio function normally requires users to modify their applications?
- Traffic management
- Metrics
- Distributed tracing
- Policy enforcement
Question 5: Which Istio component is always required even when you install only certain Istio features?
- Mixer
- Pilot
- Citadel
- Istioctl
Question 6: Which Istio component is part of the Istio service mesh data plane?
- Mixer
- Pilot
- Citadel
- Envoy sidecar
Question 7: Which Istio features allow you to configure per namespace?
- Policy enforcement
- Traffic management
- Authentication policy
- Telemetry
Question 8: To use Istio, a service must run in Kubernetes.
- True
- False
Question 9: What’s the purpose of a sidecar container in Kubernetes?
- It’s a container with Istio installed.
- It’s utility container in a pod.
- It helps to speed up the cluster run time.
- None of these
Question 10: What Istio component primarily manages telemetry?
- Pilot
- Istio Citadel
- Mixer
- Istio data plane
Question 11: What is an Envoy?
- A web server
- A sidecar proxy
- A pod
- None of these
Question 12: What component is primarily responsible for traffic management?
- Pilot
- Mixer
- Istio Citadel
- Security
Question 13: A VirtualService defines policies that apply to traffic intended for a service after routing has occurred.
- True
- False
Question 14: ServiceEntry configuration enables services within the mesh to access a service not necessarily managed by Istio.
- True
- False
Question 15: A/B testing is a method of performing identical tests against two separate service versions to determine which performs better.
- True
- False
Question 16: Telemetry in Istio can help you to pinpoint latency problems in microservices.
- True
- False
Question 17: What is the default sidecar proxy in istio?
- GINX
- Envoy
- HAProxy
- Pilot
Question 18: With what Istio component can you use to write custom adapters for tracing and metrics?
- Citadel
- Mixer
- Pilot
- Envoy
Question 19: Istio can secure the communication between microservices without requiring app code changes.
- True
- False
Question 20: In this course, what is an ingress?
- A collection of services
- A collection of rules that allow inbound connections to reach the cluster services
- A pathway to bypass disabled services
- None of these
Introduction to Beyond the Basics: Istio and IBM Cloud Kubernetes Service
“Beyond the Basics: Istio and IBM Cloud Kubernetes Service” is a comprehensive guide designed to help users delve deeper into the powerful capabilities of Istio in conjunction with IBM Cloud Kubernetes Service (IKS). This guide is tailored for individuals who have a fundamental understanding of Kubernetes and Istio and are eager to explore advanced features and optimizations.
Istio is an open-source service mesh platform that enables you to connect, secure, control, and observe services in Kubernetes environments. It provides a robust set of tools for managing microservices-based architectures, including traffic management, security, observability, and policy enforcement.
IBM Cloud Kubernetes Service (IKS), on the other hand, is a managed Kubernetes offering from IBM Cloud. It provides a fully managed Kubernetes cluster, removing the operational overhead of managing Kubernetes infrastructure and allowing developers to focus on building and deploying applications.
In “Beyond the Basics: Istio and IBM Cloud Kubernetes Service,” you’ll embark on a journey to explore advanced Istio features and learn how to leverage them effectively within the IBM Cloud Kubernetes Service environment. Here’s a glimpse of what you can expect to learn:
- Traffic Management: Dive into sophisticated traffic routing strategies using Istio’s powerful traffic management capabilities. Learn how to implement A/B testing, canary deployments, blue-green deployments, and more to manage traffic flow and minimize downtime during updates.
- Security: Explore Istio’s robust security features for securing service-to-service communication within your Kubernetes clusters. Discover how to enforce mutual TLS (mTLS), implement access control policies, and protect your applications from common security threats.
- Observability: Learn how to gain deep insights into your microservices architecture using Istio’s observability features. Explore distributed tracing with Jaeger, metrics collection with Prometheus, and log aggregation with tools like Fluentd and Elasticsearch to monitor and troubleshoot your applications effectively.
- Performance Optimization: Discover techniques for optimizing the performance of your microservices using Istio and IBM Cloud Kubernetes Service. Learn how to fine-tune traffic routing, implement circuit breaking, and leverage Istio’s traffic management capabilities to improve the overall performance and reliability of your applications.
- Advanced Use Cases: Delve into advanced Istio use cases and best practices for implementing service mesh architectures in production environments. Explore topics such as multi-cluster deployments, hybrid cloud integration, and managing Istio configuration at scale.
