Question 1
IntermediateConfigure network security · Secure external and internal traffic using TLS certificates
You are the OpenShift Administrator for a financial institution. A development team needs to expose a secure internal banking API to external partners. The application handles sensitive data that must be encrypted from the client all the way to the pod. The TLS termination must not occur at the router level; the router should simply forward the encrypted traffic to the destination pod which holds the private key. Which Route configuration strategy should you implement?
Answer and explanation
Correct answer: B
Passthrough termination sends encrypted traffic directly to the destination pod without the router decrypting it. This is required when the pod owns the private key and end-to-end encryption is mandatory without an intermediate decryption point.
