Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Microsoft AZ-204 Exam - Topic 11 Question 28 Discussion

Actual exam question for Microsoft's AZ-204 exam
Question #: 28
Topic #: 11
[All AZ-204 Questions]

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this question, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You are developing a solution that will be deployed to an Azure Kubernetes Service (AKS) cluster. The solution will include a custom VNet, Azure Container Registry images, and an Azure Storage account.

The solution must allow dynamic creation and management of all Azure resources within the AKS cluster.

You need to configure an AKS cluster for use with the Azure APIs.

Solution: Enable the Azure Policy Add-on for Kubernetes to connect the Azure Policy service to the GateKeeper admission controller for the AKS cluster. Apply a built-in policy to the cluster.

Does the solution meet the goal?

Show Suggested Answer Hide Answer
Suggested Answer: B

Instead create an AKS cluster that supports network policy. Create and apply a network to allow traffic only from within a defined namespace

References:

https://docs.microsoft.com/en-us/azure/aks/use-network-policies


Contribute your Thoughts:

0/2000 characters
Louvenia
5 months ago
Yes, this is how you ensure compliance in AKS!
upvoted 0 times
...
Hermila
5 months ago
Wait, can GateKeeper really manage all resources dynamically?
upvoted 0 times
...
Margret
5 months ago
Not sure if built-in policies cover all needs though.
upvoted 0 times
...
Shaniqua
5 months ago
I think it’s a solid solution, definitely meets the goal.
upvoted 0 times
...
Stephanie
5 months ago
Enabling Azure Policy Add-on is a good move!
upvoted 0 times
...
Sean
5 months ago
I think enabling the Azure Policy Add-on is important, but I’m not convinced it’s the only thing needed for dynamic resource management. I might lean towards "No" on this one.
upvoted 0 times
...
Jesusa
5 months ago
I feel like I’ve seen something similar in the practice tests. Applying a built-in policy seems like it should help, but I’m unsure if it covers the dynamic creation aspect completely.
upvoted 0 times
...
Ozell
5 months ago
This reminds me of a practice question where we had to apply policies in AKS. I think enabling the Azure Policy Add-on is a step in the right direction, but I’m not confident it fully addresses all the goals.
upvoted 0 times
...
Shay
6 months ago
I remember studying Azure Policy and its integration with AKS, but I'm not entirely sure if enabling the add-on directly meets the dynamic management requirement.
upvoted 0 times
...
Leonora
6 months ago
This is a tricky one. I'm torn between the security-related processes and the documented IT policies and procedures. Both seem important, but I'm not sure which one is the most critical. I'll need to weigh the options carefully.
upvoted 0 times
...
Nobuko
6 months ago
Hmm, I'm a bit confused about the differences between FLASHBACK LOGS and REDO/UNDO logs. I'll need to review those concepts before attempting this.
upvoted 0 times
...

Save Cancel