KCNA Cloud Native Architecture Practice Question
Which THREE of the following are benefits of using a service mesh? (Select three.)
⚠ Common exam trap
CNCF often tests the misconception that a service mesh improves performance or handles autoscaling, when in fact it focuses on traffic management, security, and observability at the cost of some latency.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Fine-grained traffic control (e.g., canary deployments)
A service mesh, such as Istio or Linkerd, provides fine-grained traffic control through features like traffic splitting, header-based routing, and weighted load balancing. This enables canary deployments by directing a small percentage of traffic to a new version of a service, allowing safe testing in production without affecting all users.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Automatic scaling of pods
Why it's wrong here
Scaling is handled by HPA/VPA, not service mesh.
- ✗
Increased application performance
Why it's wrong here
Service mesh may add latency due to sidecar proxying.
- ✓
Fine-grained traffic control (e.g., canary deployments)
Why this is correct
Service mesh enables advanced traffic routing.
- ✓
Improved observability through metrics and tracing
Why this is correct
Service mesh provides detailed telemetry.
- ✓
Simplified service-to-service security with mutual TLS
Why this is correct
Service mesh can encrypt traffic between services.
Go deeper
Related to this question
Learn chapter
Cloud Native Application Design Principles
Key term
Service Mesh
A service mesh is a dedicated infrastructure layer that manages communication between microservices, handling tasks like service discovery, load balancing, encryption, and observability without requiring changes to application code.
About these practice questions
One of 833 original KCNA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This KCNA practice question is part of Courseiva's free CNCF certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the KCNA exam.