Cilium Certified Associate (CCA)

The Cilium Certified Associate (CCA) exam confirms a user’s knowledge of connecting, securing, and observing Kubernetes clusters using Cilium.

The CCA demonstrates a candidate's understanding of the major features, benefits and use cases offered by Cilium.

The CCA is an entry-level certification designed for platform or cloud engineers with interests in networking, security, and observability.

Architecture - 20%

• Understand the Role of Cilium in Kubernetes Environments
• Cilium Architecture
• IP Address Management (IPAM) with Cilium
• Cilium Component Roles
• Datapath Models

Network Policy - 18%

• Interpret Cilium Network Polices and Intent
• Understand Cilium's Identity-based Network Security Model
• Policy Enforcement Modes
• Policy Rule Structure
• Kubernetes Network Policies versus Cilium Network Policies

Service Mesh - 16%

• Know How to use Ingress or Gateway API for Ingress Routing
• Service Mesh Use Cases
• Understand the Benefits of Gateway API over Ingress
• Encrypting Traffic in Transit with Cilium
• Sidecar-based versus Sidecarless Architectures

Network Observability - 10%

• Understand the Observability Capabilities of Hubble
• Enabling Layer 7 Protocol Visibility
• Know How to Use Hubble from the Command Line or the Hubble UI

Installation and Configuration - 10%

• Know How to Use Cilium CLI to Query and Modify the Configuration
• Using Cilium CLI to Install Cilium, Run Connectivity Tests, and Monitor its Status

Cluster Mesh - 10%

• Understand the Benefits of Cluster Mesh for Multi-cluster Connectivity
• Achieve Service Discovery and Load Balancing Across Clusters with Cluster Mesh

eBPF - 10%

• Understand the Role of eBPF in Cilium
• eBPF Key Benefits
• eBPF-based Platforms versus IPtables-based Platforms

BGP and External Networking - 6%

• Egress Connectivity Requirements
• Understand Options to Connect Cilium-managed Clusters with External Networks

1. After purchase the exam voucher, please log into your portal LFOSSA website, your exam voucher will be available under "Exam & Learning Voucher" (password-protected).

2. You need an LFID to register for and take Linux Foundation (LF) certification exams. If you already have a Linux Foundation ID (LFID), you can redeem your exam voucher at https://trainingportal.linuxfoundation.org/redeem . If you do not have a LFID, click here (https://trainingportal.linuxfoundation.org/access/saml/login) to create one.

3. Log in to your LF Education portal,  enter your exam voucher code in the Enter Registration Code field and click Validate, then check the box: " I agree to The Linux Foundation Training Terms, Conditions & Policies and the Thought Industries Terms & Conditions." 

4. A confirmation message “Congrats, your code has been validated” will appear upon successful validation, confirming your voucher is valid. Click Register to complete the exam voucher registration.

5. Log in to LF Education global website with your LFID.   After the registration process, the certification exam will be available in the learner's portal within 24 hours, then the candidate will be available to take and schedule exam. 

Linux Foundation Global Certification & Confidentiality Agreement

Candidate Handbook

Important Instructions

Frequently Asked Questions

The Exam Voucher is non-refundable upon purchase.

Exam Voucher is redeemable within 90 days post-purchase; Exam eligibility will be valid for 1 year from your registration date. You now have 90 days + 365 days for exam preparation!