Why security spans all services in Microservices - Quick Recap

Recall & Review

beginner

Why must security be applied across all microservices rather than just at the entry point?

Because each microservice can be accessed independently, security must be enforced at every service to prevent unauthorized access and data breaches.

intermediate

What is the risk of trusting internal network calls between microservices without security?

If internal calls are not secured, attackers who gain access to the network can move laterally and exploit services without restrictions.

intermediate

How does applying security to all services help in limiting the blast radius of an attack?

By securing each service individually, a compromise in one service does not automatically give access to others, containing the damage.

beginner

What role does authentication and authorization play in securing microservices?

Authentication verifies who is making a request, and authorization controls what actions they can perform, both essential at every service boundary.

beginner

Why is encryption important between microservices?

Encryption protects data in transit from being read or altered by attackers, ensuring confidentiality and integrity between services.

Why should security be enforced on every microservice?

A Because security slows down the system

B Because only the first service needs protection

C Because microservices never communicate with each other

D Because each service can be accessed independently

Each microservice can be accessed on its own, so security must be applied everywhere to prevent unauthorized access.

What happens if internal microservice calls are not secured?

A Attackers can move freely between services

B Services become faster

C No impact on security

D Services stop communicating

Without security on internal calls, attackers who breach the network can exploit multiple services easily.

How does securing all services limit attack damage?

A It isolates compromised services

B It makes all services vulnerable

C It allows attackers to access all data

D It disables services

Securing each service individually helps contain attacks to only the compromised service.

What two security checks are essential at every microservice boundary?

A Load balancing and routing

B Authentication and authorization

C Caching and logging

D Compression and encryption

Authentication confirms identity; authorization controls access rights at each service.

Why encrypt data between microservices?

A To reduce storage needs

B To speed up communication

C To protect data from being read or changed

D To make debugging easier

Encryption ensures data privacy and integrity during transmission between services.

Explain why security must span all microservices in a system.

Think about how attackers might exploit weak points if only one service is protected.

Describe the consequences of not applying security consistently across all microservices.

Consider what happens if one service is vulnerable but others are secure.