2V0-71.23 Question 39
Select 3An organization is deploying a Tanzu Kubernetes cluster with a service mesh to manage microservices communication. They want to achieve traffic observability, secure service-to-service communication, and fine-grained traffic control. Which capabilities of a service mesh address these requirements?
- A
Mutual TLS (mTLS) for securing service-to-service communication
- B
Centralized logging for Kubernetes system events
- C
Traffic shaping for fault injection and retries
- D
Distributed tracing for identifying bottlenecks in service communication
- E
Container image scanning for vulnerabilities
Show answer and explanation
Correct answers: A, C, D
Explanation
A service mesh primarily focuses on managing service-to-service communication, including securing traffic via mTLS, improving observability through distributed tracing, and controlling traffic with advanced techniques such as shaping and fault injection. These features enable organizations to seamlessly manage and secure microservices communication in their Kubernetes environments.
- A. Correct.
Mutual TLS (mTLS) is a core feature of service mesh that ensures secure service-to-service communication by encrypting traffic and authenticating services.
- B. Incorrect.
Centralized logging for Kubernetes system events is unrelated to service mesh functionality. It is typically handled by logging solutions like Fluentd or Elasticsearch.
- C. Correct.
Traffic shaping, including fault injection and retries, is a service mesh feature that enables fine-grained traffic control to ensure system reliability and resiliency.
- D. Correct.
Distributed tracing is a service mesh capability that helps identify bottlenecks and monitor service-to-service communication.
- E. Incorrect.
Container image scanning for vulnerabilities is a security feature unrelated to service mesh. It focuses on securing container images rather than managing service communication.