Medium1 markMultiple Choice

AZ-305 · Question 40 · Domain 4.1: Design a Compute Solution

You are designing the network architecture for an Azure Kubernetes Service (AKS) cluster.

Security requirements dictate that every pod must receive an IP address from the Azure Virtual Network subnet. You must also be able to apply Azure Network Security Groups (NSGs) and User Defined Routes (UDRs) directly to the pod IP addresses.

Which AKS network plugin should you recommend?

Answer options:

A.

Kubenet

B.

Azure CNI

C.

Flannel

D.

Calico

How to approach this question

Match 'pod must receive an IP address from the VNet' to Azure CNI. Kubenet uses an overlay.

Full Answer

B.Azure CNI✓ Correct
Azure CNI
Azure CNI (Container Network Interface) assigns an IP address from the Azure Virtual Network directly to every pod. This allows pods to be treated like any other resource on the VNet, meaning you can apply NSGs, UDRs, and connect them directly to on-premises networks. Kubenet, by contrast, uses an overlay network where pods get private IPs hidden behind the node's IP.

Common mistakes

Choosing Kubenet to save IP addresses. While Kubenet saves IPs, it violates the requirement that pods must get IPs from the VNet.

Practice the full Azure Solutions Architect Expert AZ-305 Practice Exam 4

55 questions · hints · full answers · grading

More questions from this exam