ISC2 CISSP Practice Question

The best solution is an architecture that implements secure service-to-service communication with mutual TLS authentication. This approach provides infrastructure to manage communication security between application components with built-in authentication and authorization capabilities. It verifies service identity and enforces fine-grained access policies for inter-component communications. API gateways primarily focus on external-to-internal traffic rather than internal component communications. While container orchestration platform RBAC manages permissions within the orchestration platform itself, it doesn't address the communication security between deployed applications. Traditional network segmentation with ACLs represents a perimeter-based approach that cannot provide the identity-based, application-level security required for modern architectures.