Bird
0
0

A microservice configured for Mutual TLS fails to authenticate its peer, and logs indicate 'unable to verify certificate'. What is the most probable cause?

medium📝 Analysis Q6 of 15
Microservices - Service Mesh
A microservice configured for Mutual TLS fails to authenticate its peer, and logs indicate 'unable to verify certificate'. What is the most probable cause?
AThe microservice is using an unsupported TLS version
BThe microservice's private key is missing
CThe network connection is blocked by firewall
DThe peer's certificate is not signed by a CA in the local trust store
Step-by-Step Solution
Solution:
  1. Step 1: Analyze the error message

    'Unable to verify certificate' indicates trust validation failure.
  2. Step 2: Identify trust store role

    The trust store must contain the CA certificate that signed the peer's certificate for verification.
  3. Final Answer:

    The peer's certificate is not signed by a CA in the local trust store -> Option D
  4. Quick Check:

    Trust store must include CA certs to verify peers [OK]
Quick Trick: Missing CA cert in trust store causes verification failure [OK]
Common Mistakes:
MISTAKES
  • Confusing private key issues with trust failures
  • Assuming network issues cause certificate verification errors
  • Ignoring the importance of CA certificates in trust store

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More Microservices Quizzes