ICA Securing Workloads Practice Question
Which TWO scenarios indicate that a PeerAuthentication policy is working correctly?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Requests are rejected when mTLS is not used by the client.
Correct operation is confirmed by successful communication under STRICT mode (using sidecars) and by observing mTLS metrics/logs.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Requests are rejected when mTLS is not used by the client.
Why this is correct
Rejection confirms the policy is enforcing security.
- ✗
Traffic from outside the mesh can reach the service in STRICT mode without modification.
Why it's wrong here
STRICT mode would reject non-mTLS traffic.
- ✗
All traffic is logged in plain text in the Envoy logs.
Why it's wrong here
Envoy logs show metadata, not payload data in plain text.
- ✓
Services with sidecars can communicate with each other in STRICT mode.
Why this is correct
This proves mTLS is performing the handshake.
- ✗
The API server allows non-mTLS traffic by default.
Why it's wrong here
This would mean the policy is not working.
About these practice questions
One of 292 original ICA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official CNCF / Linux Foundation exam blueprint
This ICA practice question is part of Courseiva's free CNCF / Linux Foundation certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ICA exam.