Microsoft SC-100 Exam - Topic 3 Question 68 Discussion

Actual exam question for Microsoft's SC-100 exam

Question #: 68
Topic #: 3

[All SC-100 Questions]

You have an Azure subscription

You plan to deploy multiple containerized microservice-based apps to Azure Kubemetes Service (AKS)

You need to recommend a solution that meets the following requirements:

* Manages secrets

* Provides encryption

* Secures service-to-service communication by using mTLS encryption

* Minimizes administrative effort

What should you include in the recommendation?

AFlux

BEnvoy

CDapr

DIstio

Show Suggested Answer

Suggested Answer: D

by Mozell at Jul 09, 2025, 09:37 PM

Limited Time Offer

25%

Off

Get Premium SC-100 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Erick

2 months ago

Envoy is solid, but I’d stick with Istio for the full feature set.

upvoted 0 times

...

Dacia

3 months ago

Wait, does Istio really minimize admin effort? Sounds complicated.

upvoted 0 times

...

Ciara

3 months ago

I think Dapr could work too, but not sure about the encryption part.

upvoted 0 times

...

Pansy

3 months ago

Definitely going with Istio for this setup!

upvoted 0 times

...

Sol

3 months ago

Istio is great for mTLS and managing secrets!

upvoted 0 times

...

Yun

3 months ago

I have a hunch that Istio is the right choice here, but I need to double-check its capabilities regarding encryption and secret management.

upvoted 0 times

...

Johnna

4 months ago

I practiced a similar question, and I think Envoy is more of a proxy, so it might not cover all the needs like mTLS.

upvoted 0 times

...

Fernanda

4 months ago

I'm not entirely sure, but I feel like Dapr might also handle some of those requirements, especially with microservices.

upvoted 0 times

...

Lauryn

4 months ago

I remember studying about service meshes, and I think Istio is the one that provides mTLS and manages secrets effectively.

upvoted 0 times

...

Carylon

4 months ago

Dapr seems like it could be a good fit here. It handles a lot of the service mesh functionality out of the box, and the integration with Azure should make it easy to set up and manage.

upvoted 0 times

...

Yuki

4 months ago

I'm a bit confused by the "minimizes administrative effort" requirement. Does that rule out some of the more complex options like Istio? I'll need to research the different solutions more closely.

upvoted 0 times

...

Dorothy

5 months ago

Hmm, managing secrets, encryption, and securing service-to-service communication - that sounds like a job for Istio. I'm pretty confident that's the right solution here.

upvoted 0 times

...

Tracey

5 months ago

This looks like a tricky one. I'll need to carefully review the requirements and think through the different options.

upvoted 0 times

...

Stephaine

7 months ago

Flux? Really? That's like trying to secure your house with a piece of string. Dapr is clearly the way to go here.

upvoted 0 times

Felton

5 months ago

User 3: Istio is another good option for minimizing administrative effort.

upvoted 0 times

...

Miss

5 months ago

User 2: I agree, Dapr also secures service-to-service communication with mTLS encryption.

upvoted 0 times

...

Marla

5 months ago

User 1: Dapr is definitely the best choice for managing secrets and providing encryption.

upvoted 0 times

...

Rosalia

7 months ago

I believe Dapr should also be included as it manages secrets and minimizes administrative effort.

upvoted 0 times

...

Margo

7 months ago

I'm leaning towards Envoy. It's a powerful proxy that can handle all the security requirements, and it's got a great community behind it.

upvoted 0 times

Katlyn

5 months ago

Have you considered Istio as well? It's another popular option for managing service-to-service communication securely.

upvoted 0 times

...

Titus

5 months ago

I agree, Envoy is known for its strong security features and it's widely used in the industry.

upvoted 0 times

...

Shayne

7 months ago

I think Envoy is a solid choice. It can definitely handle the security needs for your microservices.

upvoted 0 times

...

Ernest

7 months ago

I think Envoy is a solid choice. It can handle encryption and mTLS for service-to-service communication.

upvoted 0 times

...

Royal

7 months ago

I agree with An, Istio provides mTLS encryption for securing service-to-service communication.

upvoted 0 times

...

An

7 months ago

I think we should include Istio in the recommendation.

upvoted 0 times

...

Felicidad

7 months ago

Istio seems like the obvious choice here. It's got all the features we need, and it's a well-established solution in the Kubernetes ecosystem.

upvoted 0 times

...

Pete

8 months ago

Hmm, Dapr looks like the way to go. It handles secrets, encryption, and mTLS with minimal admin effort. Plus, it's got a cool name that makes me think of a dinosaur!

upvoted 0 times

Emerson

5 months ago

User 2: Yeah, Dapr also supports mTLS encryption for secure service-to-service communication.

upvoted 0 times

...

Carlee

7 months ago

User 1: I agree, Dapr seems like the best choice for managing secrets and encryption.

upvoted 0 times

...