Software Development Security
Question #135
You are the lead security engineer for a new microservices-based application. Which security approach should you prioritize to ensure robust service-to-service authentication and encryption?
A. Implement network segmentation policies using NAT to isolate communication.
B. Set up API gateways with rate limiting to prevent potential resource abuse.
C. Configure OAuth to facilitate seamless authorization sharing between services.
D. Adopt mutual TLS (mTLS) to enable bidirectional authentication and encryption.
Domain Concept: Software Development Security
This scenario evaluates management-level decision making in Software Development Security. In CISSP exam scenarios, evaluate answers through executive governance, risk assessment, life safety, and due diligence before implementing technical controls.
💡 View the Answer & Detailed Explanation
The correct answer to this scenario-based question requires an understanding of the CISSP Managerial Mindset. Register to view our in-depth explanation and access 1100+ adaptive questions completely free.