Create an Implementation of Service Mesh VCAP-VCF-VKS Practice Questions (Page 4)

Questions 16–18

1. 16foundation · easy

   In a service mesh architecture, which two planes are the primary components that work together to provide the mesh's functionality?

   • AManagement plane and application plane
   • BData plane and application plane
   • CControl plane and management plane
   • DControl plane and data plane
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A logistics company has a service mesh deployed and wants to enforce that only the `billing` service can access the `payment-processing` service. They have created a ServiceAccount for the `billing` service and want to implement this restriction. Which mesh configuration should they apply?

   • AAn AuthorizationPolicy that allows requests from the `billing` ServiceAccount to the `payment-processing` service and denies all other requests
   • BA DestinationRule that configures a circuit breaker for the `payment-processing` service
   • CA VirtualService that routes all traffic from `billing` to `payment-processing` and drops other traffic
   • DA NetworkPolicy that allows ingress from the `billing` pod's IP range to the `payment-processing` service
   Reveal Solution Discussion Select an answer first
3. 18application · medium

   A financial services company is deploying a service mesh on VMware Tanzu for a new microservices application. The application has strict compliance requirements that mandate all east-west traffic between services be encrypted and that access to the mesh control plane be restricted to a small set of platform engineers. The network team has stated that they cannot modify the underlying NSX-T security policies for the application namespace. Which two configuration elements must the service mesh implementation include to satisfy these requirements?

   • AEnable mTLS with automatic peer authentication and configure Role-Based Access Control (RBAC) on the control plane
   • BDeploy a sidecar proxy on every pod and use Kubernetes NetworkPolicies for east-west encryption
   • CEnable TLS origination at the ingress gateway and configure network policies in the application namespace
   • DConfigure a global DestinationRule for TLS and rely on Kubernetes RBAC for control plane access
   Reveal Solution Discussion Select an answer first