hardMultiple ChoiceObjective-mapped
200-901 Practice Question: A microservice application uses JWT for…
A microservice application uses JWT for authentication. The JWT is signed with RS256. Which practice ensures that the public key used for verification is securely distributed to all services?
⚠ Common exam trap
Cisco often tests the misconception that PKI is always required for secure key distribution, but in a microservice environment with a static public key, a simpler configuration management approach (like Kubernetes ConfigMaps) is more practical and aligns with DevOps principles.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Store the public key in a Kubernetes ConfigMap and mount it into pods.
Kubernetes ConfigMaps allow you to decouple configuration artifacts like public keys from container images, enabling secure, centralized distribution. Mounting the ConfigMap into pods ensures that all microservice instances can access the same public key without embedding it in source code or relying on external PKI for every verification. This approach aligns with cloud-native best practices for managing secrets and configuration in a microservice architecture.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Include the public key in the JWT header.
Why it's wrong here
Not standard for RS256; JWK set is used instead.
- ✗
Embed the public key in each service's source code.
Why it's wrong here
Insecure and difficult to rotate.
- ✗
Use a public key infrastructure (PKI) and distribute via HTTPS.
Why it's wrong here
A PKI distributes certificates via HTTPS, but the stem requires secure distribution of the *public key* for RS256 JWT verification. PKI manages certificate lifecycle and trust chains, not the direct, service-to-service distribution of a raw public key. This option is tempting because HTTPS is a standard secure transport, and PKI is commonly used for TLS certificate distribution. It would be correct if the question asked about distributing TLS certificates for channel encryption, not about distributing a JWT verification key.
- ✓
Store the public key in a Kubernetes ConfigMap and mount it into pods.
Why this is correct
Standard method for distributing configuration in Kubernetes.
Go deeper
Related to this question
About these practice questions
One of 989 original 200-901 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-901 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-901 exam.