Bird
0
0

You need to design a microservices system with Mutual TLS where services dynamically scale up and down. Which approach best ensures secure and scalable certificate management?

hard📝 Trade-off Q15 of 15
Microservices - Service Mesh
You need to design a microservices system with Mutual TLS where services dynamically scale up and down. Which approach best ensures secure and scalable certificate management?
AUse a centralized certificate authority with automated certificate issuance and rotation
BManually generate and distribute certificates to each service instance
CDisable Mutual TLS during scaling to avoid certificate issues
DUse the same certificate for all service instances to simplify management
Step-by-Step Solution
Solution:
  1. Step 1: Understand challenges of scaling with Mutual TLS

    Dynamic scaling requires automated certificate management to avoid manual errors and delays.
  2. Step 2: Evaluate options for secure and scalable management

    A centralized CA with automation allows issuing and rotating certificates securely as instances scale.
  3. Step 3: Reject insecure or manual approaches

    Manual distribution is error-prone, disabling TLS reduces security, and sharing certificates risks compromise.
  4. Final Answer:

    Use a centralized certificate authority with automated certificate issuance and rotation -> Option A
  5. Quick Check:

    Central CA + automation = scalable Mutual TLS [OK]
Quick Trick: Automate certs with central CA for scaling [OK]
Common Mistakes:
MISTAKES
  • Manually managing certs for each instance
  • Disabling Mutual TLS to avoid complexity
  • Sharing certificates across instances

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More Microservices Quizzes