Examkin

Question

Difficulty: EasyConfigure Azure Kubernetes Service (AKS)

You are deploying a new Azure Kubernetes Service (AKS) cluster to host a microservice workload. The network routing requirements are as follows:
- The node pool must be deployed inside an existing virtual network subnet with the CIDR block 10.240.0.0/2710.240.0.0/27 (which provides 3030 usable IP addresses).
- The cluster must be able to scale up to 120120 Pods during peak traffic.
- Pods must not be assigned IP addresses directly from the virtual network subnet to prevent IP address exhaustion.

Which network configuration should you select for the AKS cluster?

  1. Kubenet networkingAnswer
  2. B
    Azure Container Networking Interface (CNI) networking
  3. C
    Azure CNI with dynamic IP allocation
  4. D
    Azure CNI with Calico network policies

Answer

Kubenet networking
Kubenet networking is the correct choice because it uses an overlay network where only the Kubernetes nodes receive IP addresses from the subnet (10.240.0.0/2710.240.0.0/27). The Pods are assigned IP addresses from a separate, logically distinct address range that is not routed directly in the virtual network, thereby conserving the limited IP addresses in the subnet.

Step-by-Step Solution

1
Analyze the subnet size and IP requirements.
The subnet CIDR block is 10.240.0.0/2710.240.0.0/27, providing only 3030 usable IP addresses, while the application requires scaling up to 120120 Pods.
This establishes that we cannot use a network model where every Pod consumes a subnet IP address.
2
Evaluate the IP allocation behavior of Kubenet.
In Kubenet, only nodes receive IP addresses from the subnet, while Pods receive IPs from a separate logical address space (overlay).
This allows the nodes to fit in the 10.240.0.0/2710.240.0.0/27 subnet while the Pods run on a separate private IP range, satisfying the constraint.
3
Evaluate the IP allocation behavior of Azure CNI options.
Azure CNI and its variations assign IP addresses to Pods directly from the virtual network subnets, which would lead to IP exhaustion in this scenario.
This rules out Azure CNI and its variants.

Key Concept

Kubenet vs. Azure CNI IP Address Allocation
Rate this question

Topics

Configure Azure Kubernetes Service (AKS)

More questions from this topic