2V0-71.23 Question 289
Select 3Your organization is deploying a critical microservices-based application using VMware Tanzu Kubernetes Grid (TKG). The application must ensure secure communication between microservices and support traffic control for load balancing and routing. Which application connectivity services and traffic control benefits provided by Tanzu Service Mesh should your team prioritize for this deployment?
- A
Service-to-service encryption with mutual TLS (mTLS)
- B
Automatic horizontal pod scaling based on CPU usage
- C
Traffic shaping and traffic splitting for canary deployments
- D
Centralized observability for service-to-service communication
- E
Dynamic DNS configuration for external access
Show answer and explanation
Correct answers: A, C, D
Explanation
Tanzu Service Mesh provides key features such as service-to-service encryption with mTLS, traffic shaping and splitting for advanced traffic control, and centralized observability to monitor and manage microservice communication. These capabilities are critical for ensuring secure and reliable application connectivity and traffic control in a microservices architecture.
- A. Correct.
Tanzu Service Mesh provides service-to-service encryption using mTLS, ensuring secure communication between microservices. This is a key feature for secure application connectivity.
- B. Incorrect.
While automatic horizontal pod scaling is a Kubernetes feature, it is not a direct capability of Tanzu Service Mesh under application connectivity services and traffic control.
- C. Correct.
Tanzu Service Mesh supports traffic shaping and splitting, which allows fine-grained traffic control for scenarios like canary deployments or blue-green deployments.
- D. Correct.
Centralized observability is a benefit of Tanzu Service Mesh, enabling visibility into service-to-service communication for debugging and performance tuning.
- E. Incorrect.
Dynamic DNS configuration is not a direct feature of Tanzu Service Mesh's application connectivity or traffic control but is related to external DNS setups.