KCNA Cloud Native Architecture Practice Question
Which THREE of the following are benefits of using a service mesh? (Choose 3.)
⚠ Common exam trap
CNCF often tests the misconception that a service mesh is a general-purpose tool for all infrastructure concerns, leading candidates to incorrectly select options like database management or code compilation, when in fact the service mesh is narrowly focused on network-level traffic management, security, and observability.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Security
A service mesh provides security benefits (B) by enforcing mutual TLS (mTLS) between workloads, issuing and rotating service identities/certificates, and applying fine-grained authorization policies without changing application code. It delivers observability (C) through sidecar proxies that automatically collect metrics (e.g., request rate, latency, error rates), distributed traces, and access logs across service-to-service calls. It also offers traffic management (E) via features such as dynamic routing, load balancing, retries, timeouts, circuit breaking, and canary or blue/green deployments. The remaining options are unrelated: database management (A) is handled by database systems or DBaaS platforms, not a service mesh, and code compilation (D) is a build-time developer/CI activity that a service mesh does not perform.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Database management
Why it's wrong here
Database management is handled by database engines and operators, not by a service mesh, which intercepts service-to-service network traffic through sidecar proxies. It is tempting because meshes sit beside application workloads, but they provide mTLS, traffic routing, retries and telemetry rather than schema, query or replication management.
- ✓
Security
Why this is correct
A service mesh enforces mutual TLS between workloads, provides identity-based authentication and authorisation, and centralises policy, delivering encryption and access control without application changes. This satisfies the stem's security benefit, complementing traffic management, observability and resilience rather than replacing them.
- ✓
Observability
Why this is correct
A service mesh provides observability by collecting telemetry, traces and metrics from sidecar proxies across all service-to-service calls. This gives uniform visibility into latency, error rates and traffic flow without instrumenting each application, which is a core benefit alongside traffic management and security.
- ✗
Code compilation
Why it's wrong here
Code compilation is performed by language toolchains and build systems, not by a service mesh, which operates at the network layer via sidecar proxies. It is tempting because meshes are deployed alongside application containers, but their scope is traffic management, mTLS, observability and retries, not building source code.
- ✓
Traffic management
Why this is correct
A service mesh provides traffic management through dynamic routing, load balancing, retries and traffic splitting between service instances. This satisfies the stem's benefit by decoupling traffic control from application code, enabling canary releases and resilience without changing the services themselves.
Go deeper
Related to this question
About these practice questions
Courseiva writes every KCNA question from scratch — 930 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This KCNA practice question is part of Courseiva's free CNCF certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the KCNA exam.