1. True – Traffic routing is a feature of Envoy, which receives its configuration from Pilot.
2. True – Istio can work in a zero-trust network and still provide enterprise-grade security.
3. True – You can enable a reverse firewall in Istio through an Egress gateway, which will block outbound access from microservices.

4. True – Dark launches/Family-and-Friend Testing is used to route traffic to select groups of users without their knowledge. 
5. True – An Istio gateway can have multiple virtual services that can be used by different application owners.
6. True – Istio's virtual service is a superset of a Kubernetes service since it provides more features and functions than its native service.
7. True – The destination rule defines the configuration, but it has no role in traffic routing since the subsets that it defines are used in virtual services.
8. True – Load balancing at the Envoy level is done at the L7 networking layer and not at L3/L4.
9. True – You don't get the response back from the mirrored service.