easyMultiple ChoiceObjective-mapped
200-901 Practice Question: A developer needs to ensure that microservice A…
A developer needs to ensure that microservice A can securely communicate with microservice B over HTTPS within a Kubernetes cluster. What is the simplest approach?
⚠ Common exam trap
Test-takers frequently assume external-facing components like Ingress or LoadBalancer are required for HTTPS, but Kubernetes internal services can use HTTPS with ClusterIP and proper certificate management, which is simpler and more secure for east-west traffic.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create a Kubernetes Service of type ClusterIP for microservice B and configure microservice A to use HTTPS with the service DNS name.
Using a ClusterIP Service for microservice B provides a stable DNS name within the cluster, allowing microservice A to communicate over HTTPS without exposing the service externally. This approach leverages Kubernetes' internal service discovery and can be paired with a service mesh or mutual TLS (mTLS) for secure communication, meeting the requirement for simplicity and security.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use a Kubernetes Ingress resource with TLS termination for microservice B.
Why it's wrong here
Ingress is for external traffic; internal service-to-service communication does not need Ingress.
- ✗
Expose microservice B via a LoadBalancer Service and use HTTPS from microservice A.
Why it's wrong here
LoadBalancer services expose the service externally, which is unnecessary for internal communication and adds complexity.
- ✗
Connect directly using the pod IP of microservice B over HTTP.
Why it's wrong here
Direct pod IPs are ephemeral and HTTP is insecure; this breaks if pods restart.
- ✓
Create a Kubernetes Service of type ClusterIP for microservice B and configure microservice A to use HTTPS with the service DNS name.
Why this is correct
ClusterIP services are internal and can be used with TLS termination within the cluster for secure communication.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 200-901 question from scratch — 989 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-901 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-901 exam.