Free Preparation Discussions
MENU
Linux Foundation CNPA Exam - Topic 6 Question 9 Discussion
Topic #: 6
A cloud native application needs to establish secure communication between its microservices. Which mechanism is essential for implementing security in service-to-service communications?
Mutual TLS (mTLS) is the core mechanism for securing service-to-service communication in cloud native environments. Option B is correct because mTLS provides encryption in transit and mutual authentication, ensuring both the client and server verify each other's identity. This prevents unauthorized access, man-in-the-middle attacks, and data leakage.
Option A (API Gateway) manages ingress traffic from external clients but does not secure internal service-to-service communication. Option C (Service Mesh) is a broader infrastructure layer (e.g., Istio, Linkerd) that implements mTLS, but mTLS itself is the mechanism that enforces secure communications. Option D (Load Balancer) distributes traffic but does not handle encryption or authentication.
mTLS is foundational to zero-trust networking inside Kubernetes clusters. Service meshes typically provide automated certificate management and policy enforcement, ensuring seamless adoption of mTLS without requiring developers to modify application code.
--- CNCF Service Mesh Whitepaper
--- CNCF Platforms Whitepaper
--- Cloud Native Platform Engineering Study Guide
Barrett
1 month agoElvera
2 months agoCarri
2 months agoTamra
2 months agoCorazon
2 months agoJacquelyne
2 months agoDaren
3 months agoMaryrose
3 months agoJonelle
3 months agoSharmaine
3 months agoTimothy
3 months agoSheridan
4 months agoReuben
4 months agoAnnmarie
4 months agoJesus
4 months agoKindra
5 months agoKiley
5 months agoErinn
5 months agoAliza
5 months agoViva
5 months agoLorrie
5 months agoMica
6 months agoJennie
6 months agoNichelle
1 month ago