Service Mesh KCSA Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A security team wants to implement fine-grained authorization between services. They want to allow service A to call service B only if the request has a specific header. What should they use?

   • AA Kubernetes RBAC role that grants access to service B's API.
   • BAn AuthorizationPolicy with a rule that matches the header and allows traffic from service A.
   • CA NetworkPolicy that filters traffic based on IP addresses.
   • DA ConfigMap that tells service B to check the header in its code.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What type of data does a service mesh typically collect to provide observability into service health and performance?

   • AConfiguration files of the services
   • BMetrics such as request latency, error rates, and traffic volume
   • CUser passwords and credentials
   • DSource code of the services
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A team wants to implement a blue-green deployment and automatically roll back if the new version has a high error rate. They are using a service mesh. What is the most effective way to achieve this?

   • AUse Kubernetes liveness probes to detect errors and restart pods.
   • BUse the service mesh's traffic management to switch traffic and monitor metrics to trigger a rollback.
   • CUse a NetworkPolicy to block traffic to the new version if errors occur.
   • DManually monitor logs and switch traffic back if errors are seen.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the primary role of the data plane in a service mesh?

   • ATo handle and forward traffic between services
   • BTo manage and configure the sidecar proxies
   • CTo store service configuration data
   • DTo provide a user interface for operators
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company wants to trace a request as it flows through multiple microservices to identify performance bottlenecks. They have a service mesh. What should they use?

   • AKubernetes events and audit logs.
   • BA network monitoring tool that captures all packets.
   • CDistributed tracing, which the service mesh provides by propagating trace context.
   • DContainer logs from each service.
   Reveal Solution Discussion Select an answer first