[Solved] Given this PeerAuthentication config:apiVersion: security.istio.io/v1beta1 kind: PeerAuthentication metadata: name: default spec: mtls: mode:... | Kubernetes

Kubernetes - Service Mesh

Given this PeerAuthentication config:

apiVersion: security.istio.io/v1beta1
kind: PeerAuthentication
metadata:
  name: default
spec:
  mtls:
    mode: STRICT

What happens if a service tries to connect without mTLS?

AConnection is allowed without encryption

BConnection is rejected

CConnection is redirected to HTTP

DConnection is logged but allowed

Step-by-Step Solution

Solution:

Step 1: Understand STRICT mTLS behavior
STRICT mode requires encrypted and authenticated connections only.
Step 2: Analyze connection without mTLS
Without mTLS, connection does not meet policy and is rejected.
Final Answer:
Connection is rejected -> Option B
Quick Check:
STRICT mTLS rejects non-mTLS connections [OK]

Quick Trick: STRICT mode blocks non-mTLS traffic [OK]

Common Mistakes:

Master "Service Mesh" in Kubernetes

9 interactive learning modes - each teaches the same concept differently

More Kubernetes Quizzes

Given this PeerAuthentication config: