KCNA Cloud Native Architecture Practice Question
Which THREE are key benefits of using a service mesh in a cloud-native architecture? (Choose 3)
⚠ Common exam trap
CNCF often tests the misconception that a service mesh provides infrastructure-level features like storage or scaling, when in reality it is strictly a Layer 4/7 networking and security abstraction that operates independently of compute or storage resources.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Mutual TLS (mTLS) encryption between services.
A service mesh, such as Istio or Linkerd, transparently enables mutual TLS (mTLS) encryption between service sidecar proxies without requiring application code changes. This ensures all inter-service communication is encrypted and authenticated, which is a core security benefit in a zero-trust cloud-native architecture.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Persistent storage management for stateful applications.
Why it's wrong here
Storage is managed by CSI drivers and PersistentVolumes, not service mesh.
- ✓
Mutual TLS (mTLS) encryption between services.
Why this is correct
Service mesh can enforce mTLS for secure communication.
- ✗
Automatic horizontal scaling of pods.
Why it's wrong here
Scaling is handled by autoscalers, not service mesh.
- ✓
Observability through distributed tracing and metrics.
Why this is correct
Service mesh provides detailed telemetry for traffic.
- ✓
Traffic management such as canary deployments and circuit breaking.
Why this is correct
Service mesh enables advanced traffic routing and resilience patterns.
Go deeper
Related to this question
Learn chapter
Cloud Native Architecture and Concepts
Key term
Service Mesh
A service mesh is a dedicated infrastructure layer that manages communication between microservices, handling tasks like service discovery, load balancing, encryption, and observability without requiring changes to application code.
About these practice questions
One of 833 original KCNA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This KCNA practice question is part of Courseiva's free CNCF certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the KCNA exam.