2V0-71.23 Question 77
Select 4A company is deploying a distributed application across multiple Kubernetes clusters and requires east-west traffic communication between the clusters. They also need visibility into application traffic, the ability to enforce fine-grained security policies, and the capability to ensure service-to-service encryption. Which features of Tanzu Service Mesh make it an appropriate solution for this scenario?
- A
Global namespace for consistent service discovery across clusters
- B
Traffic shaping and rate-limiting for API requests
- C
Mutual TLS (mTLS) for service-to-service encryption
- D
Integrated CI/CD pipelines for faster application deployment
- E
Zero-trust security policies for fine-grained access control
- F
Observability with traffic insights and metrics
Show answer and explanation
Correct answers: A, C, E, F
Explanation
Tanzu Service Mesh is designed to address the challenges of managing distributed applications across multiple Kubernetes clusters. Its key features like global namespace, mTLS for security, zero-trust policies, and observability provide the necessary tools for consistent service discovery, secure communication, and actionable insights into application behavior. These capabilities make it an ideal solution for scenarios requiring multi-cluster communication, security, and traffic monitoring.
- A. Correct.
Global namespace is a key feature of Tanzu Service Mesh that allows services deployed across multiple clusters to communicate seamlessly, supporting consistent service discovery.
- B. Incorrect.
While rate-limiting is a feature of some traffic management tools, it is not a primary or specific feature of Tanzu Service Mesh.
- C. Correct.
Mutual TLS (mTLS) is a fundamental feature of Tanzu Service Mesh that ensures secure communication between services by encrypting traffic.
- D. Incorrect.
Integrated CI/CD pipelines are not a feature of Tanzu Service Mesh; they are more aligned with tools like VMware Tanzu Build Service or other CI/CD platforms.
- E. Correct.
Tanzu Service Mesh supports zero-trust security principles by allowing you to define fine-grained policies to control service-to-service communication.
- F. Correct.
Tanzu Service Mesh provides observability by offering visibility into application traffic, metrics, and service dependencies, which is critical for monitoring and troubleshooting.