Linux Foundation ICA exam guide covering Istio traffic management, security, and policy decisions.
This Istio Certified Associate guide helps ICA candidates focus on what the exam tests, where close answers usually split, and which review page to use next.
Use the study plan to group Kubernetes, Linux, and platform choices, the cheat sheet for scenario decisions, the sample questions for mixed practice, the FAQ for scope checks, the resources page for Linux Foundation exam references, and the glossary when cluster terms blur together.
| Item | Guide value |
|---|---|
| Vendor | Linux Foundation / CNCF |
| Exam or credential | Istio Certified Associate |
| Code or shorthand | ICA |
| Study level | Associate service mesh |
| IT Mastery page | ICA exam page |
| Guide shape | Start-here page, study plan, cheat sheet, FAQ, resources, and glossary. |
| Lane | What to master | Common weak answer |
|---|---|---|
| Traffic management | Use gateways, virtual services, destination rules, subsets, retries, timeouts, and traffic shifting. | Editing Kubernetes services when the mesh route rule is the deciding layer. |
| Security | Apply mTLS, authorization policies, peer authentication, request authentication, and trust boundaries. | Assuming service mesh automatically means every path is authorized. |
| Observability | Use telemetry, tracing, metrics, logs, and dashboards to understand mesh behavior. | Tuning traffic without observing route, response, latency, and error evidence. |
| Installation and operations | Understand sidecars, control plane, data plane, upgrades, injection, and configuration scope. | Forgetting namespace labels or revision-based injection behavior. |
| Resilience | Apply circuit breaking, outlier detection, retries, timeouts, and fault injection deliberately. | Adding retries that amplify failures or violate latency requirements. |
Istio questions are traffic and trust questions: route rule, destination policy, identity, telemetry, and failure behavior.
Use the current Linux Foundation exam page for live exam details, including name, status, pricing, duration, delivery method, languages, retirement or beta changes, and domain weights where applicable.