Question 1

You are designing the network architecture for an Azure Kubernetes Service (AKS) cluster.

Security requirements dictate that every pod must receive an IP address from the Azure Virtual Network subnet. You must also be able to apply Azure Network Security Groups (NSGs) and User Defined Routes (UDRs) directly to the pod IP addresses.

Which AKS network plugin should you recommend?

Accepted Answer

Match 'pod must receive an IP address from the VNet' to Azure CNI. Kubenet uses an overlay.

Question 2

What mistakes do candidates make on this AZ-305 question?

Accepted Answer

Choosing Kubenet to save IP addresses. While Kubenet saves IPs, it violates the requirement that pods must get IPs from the VNet.

How to approach this question

Full Answer

Common mistakes

Practice the full Azure Solutions Architect Expert AZ-305 Practice Exam 4

More questions from this exam