2V0-71.23 Question 275
Select 3An organization is deploying Tanzu Service Mesh Advanced to secure and manage their Kubernetes workloads across multiple clusters. They need to implement strict identity-based access control and enforce compliance policies for communication between microservices running in different clusters. Which features of Tanzu Service Mesh Advanced should they utilize to achieve these requirements?
- A
Global Namespace
- B
Service Identity and Certificate Management
- C
Ingress Controller Integration
- D
Secure Multi-Cluster Communication
- E
Workload Autoscaling
- F
Policy-Driven Authorization
Show answer and explanation
Correct answers: B, D, F
Explanation
Tanzu Service Mesh Advanced provides features such as Service Identity and Certificate Management, Secure Multi-Cluster Communication, and Policy-Driven Authorization to enforce identity-based access control and ensure secure, compliant communication between services. These capabilities are critical for organizations managing workloads across multiple Kubernetes clusters.
- A. Incorrect.
Global Namespace helps provide a unified namespace across clusters but does not directly enforce identity-based access control or compliance policies.
- B. Correct.
Service Identity and Certificate Management enables strong identity-based authentication between services, which is critical for enforcing access control.
- C. Incorrect.
Ingress Controller Integration is useful for managing external traffic into clusters but is not directly related to enforcing internal service-to-service communication policies.
- D. Correct.
Secure Multi-Cluster Communication ensures that communication between services across clusters is encrypted and authenticated, which is essential for secure and compliant operations.
- E. Incorrect.
Workload Autoscaling is focused on managing application performance and resource usage, not on securing or enforcing compliance for service communication.
- F. Correct.
Policy-Driven Authorization allows administrators to define and enforce fine-grained access control policies for service-to-service communication, ensuring compliance and security.