Free Preparation Discussions
MENU
Linux Foundation CNPA Exam - Topic 6 Question 9 Discussion
Topic #: 6
A cloud native application needs to establish secure communication between its microservices. Which mechanism is essential for implementing security in service-to-service communications?
Mutual TLS (mTLS) is the core mechanism for securing service-to-service communication in cloud native environments. Option B is correct because mTLS provides encryption in transit and mutual authentication, ensuring both the client and server verify each other's identity. This prevents unauthorized access, man-in-the-middle attacks, and data leakage.
Option A (API Gateway) manages ingress traffic from external clients but does not secure internal service-to-service communication. Option C (Service Mesh) is a broader infrastructure layer (e.g., Istio, Linkerd) that implements mTLS, but mTLS itself is the mechanism that enforces secure communications. Option D (Load Balancer) distributes traffic but does not handle encryption or authentication.
mTLS is foundational to zero-trust networking inside Kubernetes clusters. Service meshes typically provide automated certificate management and policy enforcement, ensuring seamless adoption of mTLS without requiring developers to modify application code.
--- CNCF Service Mesh Whitepaper
--- CNCF Platforms Whitepaper
--- Cloud Native Platform Engineering Study Guide
Barrett
4 months agoElvera
5 months agoCarri
5 months agoTamra
5 months agoCorazon
5 months agoJacquelyne
5 months agoDaren
6 months agoMaryrose
6 months agoJonelle
6 months agoSharmaine
6 months agoTimothy
6 months agoSheridan
7 months agoReuben
7 months agoAnnmarie
7 months agoJesus
7 months agoKindra
8 months agoKiley
8 months agoErinn
8 months agoAliza
8 months agoViva
8 months agoLorrie
8 months agoMica
9 months agoJennie
9 months agoFlorinda
3 months agoStephaine
3 months agoNichelle
4 months ago