You are reviewing network architecture for a new financial services platform. It must support secure communication between cloud-hosted microservices and on-prem systems. The system should prevent eavesdropping and man-in-the-middle (MITM) attacks. The services operate across multiple cloud providers. Which of the following provides the MOST effective solution?
A. Implement VPN tunnels between all cloud and on-prem endpoints.
B. Use SSL/TLS with mutual authentication for all API communications.
C. Set up a dedicated leased line between cloud and on-prem environments.
D. Rely on the cloud providers’ internal security for all communications.