KCNA Cloud Native Architecture Practice Question
In a service mesh architecture, what is the role of the sidecar proxy?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
It intercepts and controls network communication to and from the main container
The sidecar proxy intercepts all network traffic to/from the main container, enabling observability, traffic management, and security without modifying application code.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
It provides persistent storage for the pod
Why it's wrong here
The sidecar proxy handles traffic interception, routing, and telemetry for the pod; persistent storage comes from volumes, not the proxy container. It tempts anyone equating any pod container with storage duties, but the sidecar's actual role is network mediation between the application and the mesh.
- ✗
It manages the lifecycle of the pod
Why it's wrong here
Pod lifecycle management belongs to the kubelet and controllers such as ReplicaSet, not the sidecar. The sidecar proxy intercepts and routes network traffic for its pod, handling mTLS, retries and telemetry. It is tempting because sidecars share the pod's lifecycle, but that co-residence is not lifecycle control.
- ✓
It intercepts and controls network communication to and from the main container
Why this is correct
The sidecar proxy runs alongside the main container, transparently intercepting inbound and outbound network traffic so mesh policies for routing, mTLS, and telemetry apply without changing application code. This interception mechanism is what delivers service mesh traffic control.
- ✗
It serves as the main application container
Why it's wrong here
The sidecar proxy runs alongside the application container in the same pod, intercepting inbound and outbound traffic; it never hosts the application itself. It tempts those conflating the two containers, but the main application container runs the workload, while the sidecar handles service mesh networking.
Go deeper
Related to this question
Learn chapter
Observability: Monitoring, Logging, and Tracing
Key term
Service Mesh
A service mesh is a dedicated infrastructure layer that manages communication between microservices, handling tasks like service discovery, load balancing, encryption, and observability without requiring changes to application code.
About these practice questions
One of 930 original KCNA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This KCNA practice question is part of Courseiva's free CNCF certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the KCNA exam.