Free Preparation Discussions
MENU
Linux Foundation CNPA Exam - Topic 6 Question 9 Discussion
Topic #: 6
A cloud native application needs to establish secure communication between its microservices. Which mechanism is essential for implementing security in service-to-service communications?
Mutual TLS (mTLS) is the core mechanism for securing service-to-service communication in cloud native environments. Option B is correct because mTLS provides encryption in transit and mutual authentication, ensuring both the client and server verify each other's identity. This prevents unauthorized access, man-in-the-middle attacks, and data leakage.
Option A (API Gateway) manages ingress traffic from external clients but does not secure internal service-to-service communication. Option C (Service Mesh) is a broader infrastructure layer (e.g., Istio, Linkerd) that implements mTLS, but mTLS itself is the mechanism that enforces secure communications. Option D (Load Balancer) distributes traffic but does not handle encryption or authentication.
mTLS is foundational to zero-trust networking inside Kubernetes clusters. Service meshes typically provide automated certificate management and policy enforcement, ensuring seamless adoption of mTLS without requiring developers to modify application code.
--- CNCF Service Mesh Whitepaper
--- CNCF Platforms Whitepaper
--- Cloud Native Platform Engineering Study Guide
Elvera
4 days agoCarri
9 days agoTamra
15 days agoCorazon
20 days agoJacquelyne
25 days agoDaren
1 month agoMaryrose
1 month agoJonelle
1 month agoSharmaine
2 months agoTimothy
2 months agoSheridan
2 months agoReuben
3 months agoAnnmarie
3 months agoJesus
3 months agoKindra
3 months agoKiley
3 months agoErinn
3 months agoAliza
4 months agoViva
4 months agoLorrie
4 months agoMica
4 months agoJennie
4 months ago