Kubernetes - Service Mesh
You want to secure communication between microservices using Istio. Which Istio feature should you enable to encrypt traffic automatically?
You want to secure communication between microservices using Istio. Which Istio feature should you enable to encrypt traffic automatically?
hard📝 Best Practice Q15 of 15
Step-by-Step Solution
Solution:
Step 1: Identify Istio features for security
Mutual TLS (mTLS) encrypts traffic between services automatically within the mesh.Step 2: Differentiate other features
Sidecar injection adds proxies but does not alone encrypt traffic; Gateways route external traffic; Prometheus is for monitoring.Final Answer:
Mutual TLS (mTLS) for service-to-service encryption -> Option CQuick Check:
mTLS = automatic encryption in Istio [OK]
Quick Trick: Use mTLS to encrypt service traffic automatically [OK]
Common Mistakes:
- Confusing sidecar injection with encryption
- Thinking Gateway secures internal traffic
- Mixing monitoring tools with security features
Master "Service Mesh" in Kubernetes
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore Kubernetes Quizzes