2V0-71.23 Question 38
Select 2A company has deployed a Tanzu Kubernetes cluster across multiple environments and is considering implementing a service mesh for better observability, security, and traffic management. Which of the following capabilities are provided by a service mesh in this scenario?
- A
Automatic encryption of service-to-service communication using mutual TLS (mTLS)
- B
Centralized management of Kubernetes namespaces across clusters
- C
Traffic shaping and routing for service communication
- D
Distributed logging and metrics collection for applications
- E
Service discovery and load balancing within the cluster
Show answer and explanation
Correct answers: A, C
Explanation
A service mesh focuses on providing advanced networking features such as secure communication (mTLS), traffic management (e.g., shaping and routing), and observability specifically related to service-to-service communication. While it complements Kubernetes' native networking and discovery features, it does not replace core Kubernetes functionalities like namespace management or native service discovery.
- A. Correct.
Service mesh provides automatic encryption of service-to-service communication using mutual TLS (mTLS), ensuring secure communication between services.
- B. Incorrect.
Centralized management of Kubernetes namespaces is not a feature of a service mesh. This is typically handled by Kubernetes itself or other cluster management tools.
- C. Correct.
Service mesh supports traffic shaping and routing, allowing fine-grained control over how service requests are handled (e.g., traffic splitting, retries, or failover).
- D. Incorrect.
While distributed logging and metrics collection are valuable features, they are typically provided by observability tools such as Prometheus or Grafana, not directly by a service mesh.
- E. Incorrect.
Service discovery and load balancing are fundamental capabilities of Kubernetes and not exclusive to a service mesh. A service mesh may enhance traffic management but does not replace Kubernetes' native service discovery.