2V0-71.23 Question 278
Select 3Your organization is deploying a multi-cluster Kubernetes application across two regions, and there is a requirement to ensure secure, consistent service-to-service communication with encryption and observability. Additionally, the team wants to enforce different traffic routing policies based on service priorities. Which features of Tanzu Service Mesh Advanced should you leverage to meet these requirements?
- A
Global Namespace
- B
Service Discovery
- C
Service-to-Service Encryption
- D
Traffic Shaping Policies
- E
Cluster Federation
Show answer and explanation
Correct answers: A, C, D
Explanation
Tanzu Service Mesh Advanced provides features like Global Namespace for consistent service grouping across clusters, Service-to-Service Encryption for secure communication, and Traffic Shaping Policies for custom traffic routing. These features together enable secure, observable, and policy-driven service communication in multi-cluster, multi-region Kubernetes environments. Service Discovery and Cluster Federation, while useful in other contexts, do not directly address the scenario requirements.
- A. Correct.
Global Namespace allows you to group services across clusters and regions into a single logical namespace, enabling consistent communication and policies. This is critical for multi-cluster, multi-region deployments.
- B. Incorrect.
Service Discovery is a basic feature of service meshes but does not directly address the requirements for encryption, observability, or traffic routing policies.
- C. Correct.
Service-to-Service Encryption ensures that all communication between services is secure, meeting the requirement for secure service-to-service communication.
- D. Correct.
Traffic Shaping Policies allow fine-grained control over service traffic, enabling prioritization and routing based on service importance, which directly addresses the requirement for traffic routing policies.
- E. Incorrect.
Cluster Federation is not a Tanzu Service Mesh Advanced feature but rather a Kubernetes feature for managing multiple clusters. It does not directly provide the capabilities listed in the scenario.