KCNA Cloud Native Architecture Practice Question
Which THREE of the following are benefits of using a service mesh in a cloud native architecture?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Traffic management capabilities like canary deployments
Options B, D, and E are correct. A service mesh provides traffic management capabilities (e.g., canary deployments, routing, load balancing), security features like mutual TLS encryption (mTLS), and enhanced observability through metrics and tracing. Option A (management of application state across services) is not a function of a service mesh; state management is handled by other tools like databases or stateful frameworks. Option C (reduction of container image sizes) is unrelated to service mesh; image size is affected by base images and application dependencies.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Management of application state across services
Why it's wrong here
State management is outside the scope of service mesh.
- ✓
Traffic management capabilities like canary deployments
Why this is correct
Service mesh enables advanced traffic routing and canary releases.
- ✗
Reduction of container image sizes
Why it's wrong here
Service mesh does not affect container image sizes.
- ✓
Improved security through mutual TLS encryption
Why this is correct
Service mesh can enforce mTLS between services for secure communication.
- ✓
Enhanced observability with metrics and tracing
Why this is correct
Service mesh provides detailed observability for inter-service communication.
Go deeper
Related to this question
Learn chapter
Cloud Native Architecture and Concepts
Key term
Microservices Architecture
Microservices architecture is a way of building software as a collection of small, independent services that each handle one specific business function and communicate over a network.
Key term
Service Mesh
A service mesh is a dedicated infrastructure layer that manages communication between microservices, handling tasks like service discovery, load balancing, encryption, and observability without requiring changes to application code.
About these practice questions
One of 833 original KCNA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
4 more ways this is tested on KCNA
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Which TWO of the following are benefits of using a service mesh? (Choose two.)
medium- ✓ A.Improved observability of service-to-service communication
- B.Direct management of virtual machines
- C.Automated container image building
- D.Replacing the need for a container runtime
- ✓ E.Traffic management capabilities such as canary deployments
Why A: Service mesh provides improved observability and enables traffic management features like canary deployments.
Variation 2. Which TWO are benefits of using a service mesh? (Choose two.)
medium- ✓ A.Observability of service-to-service communication
- B.Automatic database scaling
- ✓ C.Traffic management (e.g., canary deployments)
- D.Container image building
- E.Load balancing of external requests
Why A: Service mesh provides observability (e.g., metrics, tracing) and traffic management (e.g., routing, retries) between services.
Variation 3. Which THREE are key benefits of using a service mesh in a cloud-native architecture? (Choose 3)
medium- A.Persistent storage management for stateful applications.
- ✓ B.Mutual TLS (mTLS) encryption between services.
- C.Automatic horizontal scaling of pods.
- ✓ D.Observability through distributed tracing and metrics.
- ✓ E.Traffic management such as canary deployments and circuit breaking.
Why B: A service mesh, such as Istio or Linkerd, transparently enables mutual TLS (mTLS) encryption between service sidecar proxies without requiring application code changes. This ensures all inter-service communication is encrypted and authenticated, which is a core security benefit in a zero-trust cloud-native architecture.
Variation 4. Which THREE of the following are benefits of using a service mesh? (Select three.)
hard- A.Automatic scaling of pods
- B.Increased application performance
- ✓ C.Fine-grained traffic control (e.g., canary deployments)
- ✓ D.Improved observability through metrics and tracing
- ✓ E.Simplified service-to-service security with mutual TLS
Why C: A service mesh, such as Istio or Linkerd, provides fine-grained traffic control through features like traffic splitting, header-based routing, and weighted load balancing. This enables canary deployments by directing a small percentage of traffic to a new version of a service, allowing safe testing in production without affecting all users.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This KCNA practice question is part of Courseiva's free CNCF certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the KCNA exam.