An administrator is deploying a new Azure Kubernetes Service (AKS) cluster named aks-billi… — Microsoft Azure Administrator (AZ-104)

An administrator is deploying a new Azure Kubernetes Service (AKS) cluster named $aks-billing$ . The cluster must use Azure CNI for high performance, but the existing virtual network ( $VNet1$ ) has a limited address space ( $10.10.0.0/16$ ) with only a single $/24$ subnet ( $subnet1$ ) available for the cluster nodes. The application requires deploying up to $500$ pods across the cluster. The pods must be able to communicate with each other, but they do not require direct IP address access from the rest of the virtual network. Which network configuration should the administrator select to meet these requirements?

Azure CNI OverlayAnswer
B
Azure CNI with dynamic Pod IP allocation
C
Standard Azure CNI
D
Kubenet networking

Answer

Azure CNI Overlay

Azure CNI Overlay is the correct solution because it combines the performance benefits of Azure CNI with the IP savings of a private Pod CIDR. Nodes are assigned IP addresses from the

/24

subnet in the VNet, while the

500

pods are assigned IP addresses from a private overlay network, fitting within the single subnet limit.

Step-by-Step Solution

Analyze the IP capacity constraint

The target cluster requires supporting up to

500

pods, but only a single

/24

subnet is available. A

/24

subnet provides only

251

usable IP addresses in Azure.

Determining available IP address capacity helps eliminate options that would cause IP address exhaustion.

Evaluate the performance and subnet constraints

The requirements specify using Azure CNI for high performance and working within a single subnet. Standard Azure CNI would exhaust IPs, and dynamic Pod IP allocation requires an additional subnet.

Aligning subnet counts and performance requirements narrows down the configuration options.

Select the correct network model

Azure CNI Overlay is selected. It uses a single subnet for nodes (VNet IPs) and a private overlay address space for pods (saving VNet IPs), while still utilizing the high-performance Azure CNI data plane.

Azure CNI Overlay meets both the single subnet constraint, the

500

pod capacity requirement, and the performance mandate.

Key Concept

Azure CNI Overlay allows AKS pods to use a separate private IP address space while still leveraging the high-performance Azure CNI routing mechanism, resolving VNet IP exhaustion in single-subnet environments.

Question

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Topics

More questions from this topic