Course Name :- Beyond the Basics: Istio and IBM Cloud Kubernetes Service.
Lab 1:- Observe Service telemetry.
Question 1 : You must modify your apps to get metrics for those apps.
- True
- False
Question 2: You must modify your apps to get distributed tracing for those apps to work properly.
- True
- False
Question 3 : What distributed tracing system does Istio support by default?
- Zipkin
- Kibana
- LogStash
- Jaeger
Question 4 : In a SOA architecture that uses tradtional debugging techniques, as requests pass through multiple services, identifying performance bottlenecks becomes increasingly difficult.
- True
- False
Lab 2 :- Expose the service mesh with istio ingress controller
Question 1: The components deployed on the service mesh by default are not exposed outside the cluster.
- True
- False
Question 2: In a Kubernetes environment, Istio uses what component to configure ingress behavior?
- Microservices Ingress controller
- Kubernetes Ingress Resources
- Cloud Ingress Resources
- Resource controller
Question 3: Ingress can provide load balancing, SSL termination, and name-based virtual hosting.
- True
- False
Question 4: What is an ingress?
- A collection of services
- A collection of pods
- A collection of rules
- A collection of clusters
Lab 3:- manage traffic
Question 1: Where are routing rules defined?
- VirtualService
- VirtualRule
- DestinationRule
- ServiceEntry
Question 2: Where are service versions (subsets) defined?
- VirtualService
- DestinationRule
- ServiceEntry
- DestinationService
Question 3: Which Istio component is responsible for sending traffic management configurations to Istio sidecars?
- Mixer
- Citadel
- Pilot
- Kubernetes
Question 4: A ServiceEntry rule describes which of the following three items?
- Ports
- Traffic policies
- Endpoints
- Protocols
Lab 4 :- Secure your service
Question 1: Citadel provides each microservice with a strong, cryptographic identity in the form of a certificate. The certificate’s lifecycle is fully managed by Istio.
- True
- False
Question 2: Istio provides microservices with mutually authenticated connections without requiring app code changes.
- True
- False
Question 3 : Mutual authentication must be on or off for the entire cluster; gradual adoption is not possible.
- True
- False
Question 4 : Citadel is not directly responsible for which one of these items?
- Provides each service with an identity representing its role
- Provides connections to exchange and validate certificates
- Provides a common trust root to allow Envoys to validate and authenticate each other
- Provides a key management system, automating generation, distribution, and rotation of certificates and keys
Lab 5 :- Enforce policies for microservices
Question 1: Creating Mixer rules requires app code changes.
- True
- False
Question 2: What is the name of the custom code that interacts with the back-end system, such as Prometheus?
- Rule
- Instance
- Adapter
- Service
Question 3: Istio Mixer moves policy decisions under operator control rather than into configuration.
- True
- False
Question 4: Mixer is not responsible for interfacing with the back-end systems.
- True
- False
Beyond the Basics : Istio and IBM Cloud Kubernetes Service final exam Answers:-
Question 1 : What is a service mesh?
- One or more containers
- A group of nodes
- A network of microservices
- A type of authentication system
Question 2: Which of these features is provided by Istio? Select all the apply.
- Traffic management
- Telemetry
- Policy enforcement
- Machine learning
- Mutual TLS
- App monetization
Question3: Microservices that are deployed in Istio can communicate to services outside of Istio.
- True
- False
Question 4: Which Istio function normally requires users to modify their applications?
- Traffic management
- Metrics
- Distributed tracing
- Policy enforcement
Question 5: Which Istio component is always required even when you install only certain Istio features?
- Mixer
- Pilot
- Citadel
- Istioctl
Question 6: Which Istio component is part of the Istio service mesh data plane?
- Mixer
- Pilot
- Citadel
- Envoy sidecar
Question 7: Which Istio features allow you to configure per namespace?
- Policy enforcement
- Traffic management
- Authentication policy
- Telemetry
Question 8: To use Istio, a service must run in Kubernetes.
- True
- False
Question 9 : What’s the purpose of a sidecar container in Kubernetes?
- It’s a container with Istio installed.
- It’s utility container in a pod.
- It helps to speed up the cluster run time.
- None of these
Question10 : What Istio component primarily manages telemetry?
- Pilot
- Istio Citadel
- Mixer
- Istio data plane
Question 11: What is an Envoy?
- A web server
- A sidecar proxy
- A pod
- None of these
Question 12 : What component is primarily responsible for traffic management?
- Pilot
- Mixer
- Istio Citadel
- Security
Question 13: A VirtualService defines policies that apply to traffic intended for a service after routing has occurred.
- True
- False
Question 14: ServiceEntry configuration enables services within the mesh to access a service not necessarily managed by Istio.
- True
- False
Question 15: A/B testing is a method of performing identical tests against two separate service versions to determine which performs better.
- True
- False
Question 16 : Telemetry in Istio can help you to pinpoint latency problems in microservices.
- True
- False
Question 17 : what is the default sidecar proxy in istio?
• NGINX
• Envoy
• HAProxy
• Pilot
Question 18 : With what Istio component can you use to write custom adapters for tracing and metrics?
- Citadel
- Mixer
- Pilot
- Envoy
- Correct
Question 19 : Istio can secure the communication between microservices without requiring app code changes.
- True
- False
Question 20 : In this course, what is an ingress?
- A collection of services
- A collection of rules that allow inbound connections to reach the cluster services
- A pathway to bypass disabled services
- None of these