Q36 AKS Domain 1 · 20–25% of exam

Which component in AKS provides mutual TLS between services automatically without code changes?

  1. A Kubernetes NetworkPolicy
  2. B Istio service mesh (correct answer)
  3. C Azure Load Balancer
  4. D nginx ingress TLS termination

Shortcut: Istio (and other service meshes) automatically inject sidecar proxies that handle mTLS between services transparently, without application code changes.