An administrator is preparing to deploy an Azure Kubernetes Service (AKS) cluster. The clu… — Microsoft Azure Administrator (AZ-104)

An administrator is preparing to deploy an Azure Kubernetes Service (AKS) cluster. The cluster will be deployed into an existing virtual network (`VNet1`) that has an address space of $10.150.0.0/16$ and a subnet named `subnet1` with an address space of $10.150.1.0/24$ .

Which IP address configuration for the Service CIDR and DNS service IP represents a valid deployment setup?

A
Service CIDR: $172.16.0.0/16$ ; DNS service IP: $172.16.0.1$
B
Service CIDR: $10.150.2.0/24$ ; DNS service IP: $10.150.2.10$
Service CIDR: $172.16.0.0/16$ ; DNS service IP: $172.16.0.10$ Answer
D
Service CIDR: $172.16.0.0/16$ ; DNS service IP: $10.150.1.10$

Answer

Service CIDR:

172.16.0.0/16

; DNS service IP:

172.16.0.10

The configuration specifying a Service CIDR of

172.16.0.0/16

and a DNS service IP of

172.16.0.10

is correct. The Service CIDR is outside the virtual network's range (

10.150.0.0/16

), avoiding routing conflicts. Additionally, the DNS service IP is located within the Service CIDR range and is not the first host IP address (

172.16.0.1

), which is reserved for the internal Kubernetes API server.

Step-by-Step Solution

Check for Service CIDR overlap with the existing virtual network.

The Service CIDR range must not fall within the

10.150.0.0/16

VNet address space.

To avoid routing conflicts, the Service CIDR must be completely separate from the virtual network address space.

Verify that the DNS service IP address falls within the defined Service CIDR block.

For a Service CIDR of

172.16.0.0/16

, the DNS service IP must be an address starting with

172.16

The DNS service IP must be a part of the Kubernetes service network space.

Ensure the DNS service IP is not the first IP address of the Service CIDR range.

Avoid using

172.16.0.1

as the DNS service IP address.

The first address in the Service CIDR is reserved for the internal Kubernetes API server (the kubernetes service).

Key Concept

Azure Kubernetes Service IP Address Planning and Configuration

Question

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Topics

More questions from this topic