Create an Implementation of Service Mesh VCAP-VCF-VKS Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   During service mesh implementation planning, which operational constraint is most likely to affect the design?

   • AThe availability of skilled staff to operate the mesh
   • BThe team's preference for a specific programming language
   • CThe number of microservices in the application
   • DThe color scheme of the monitoring dashboards
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   In a service mesh, what is the primary role of the sidecar proxy?

   • ATo provide a user interface for mesh administration
   • BTo manage the service mesh control plane
   • CTo store configuration data for the mesh
   • DTo handle traffic between services and enforce policies
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the primary purpose of validating a service mesh implementation?

   • ATo increase the number of sidecar proxies
   • BTo replace the control plane
   • CTo reduce the number of services in the mesh
   • DTo ensure the mesh is functioning as intended and meeting requirements
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A healthcare startup has just deployed a service mesh with mTLS enabled and a VirtualService that routes traffic to a canary version of the patient-records API. The team wants to validate that the mesh is functioning correctly before allowing production traffic. They have access to the mesh's observability tools and can send test requests. Which validation approach should they use to confirm both connectivity and security policies are working as intended?

   • ASend test requests to the canary service and verify that the responses are correct, then check the mesh dashboard for mTLS handshake metrics
   • BUse `kubectl exec` into a pod and run `curl` to the service IP, then check the Kubernetes audit logs
   • CRun a load test against the ingress gateway and compare response times between v1 and v2
   • DCheck the Envoy proxy configuration via the admin endpoint and verify the VirtualService is applied
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A multinational bank is planning a service mesh implementation across multiple Kubernetes clusters in different regions. The bank's security policy requires that all service-to-service communication be encrypted with mTLS, and the network team mandates that no traffic can leave a region except through a designated egress gateway. The application team wants to use a single mesh control plane for simplicity. Which architecture should the implementation team choose to meet these requirements?

   • ADeploy a control plane per cluster and use Kubernetes NetworkPolicies to enforce mTLS
   • BUse a single control plane and configure all traffic to flow through a central egress gateway in one region
   • CDeploy a mesh with a control plane per region and configure a global mTLS policy, using regional egress gateways for cross-region traffic
   • DDeploy a single control plane in one region and configure all sidecars to connect to it, with mTLS enabled globally
   Reveal Solution Discussion Select an answer first