Examkin

Question

Difficulty: EasyConfigure Azure Kubernetes Service (AKS)

An administrator is deploying a new Azure Kubernetes Service (AKS) cluster in an environment with an existing virtual network (10.100.0.0/1610.100.0.0/16). To comply with a tenant security mandate, traffic from Pods to on-premises databases must not undergo network address translation (NAT), and each Pod must be assigned a unique, routable IP address from the virtual network subnet (10.100.1.0/2410.100.1.0/24). Which network model should the administrator configure for the AKS cluster?

  1. Azure CNIAnswer
  2. B
    Kubenet
  3. C
    Azure Private Link
  4. D
    Virtual Network NAT

Answer

Azure CNI
The correct answer is Azure CNI. Under this model, every Pod gets an IP address from the subnet and can be accessed directly. This avoids network address translation (NAT) for outbound traffic from the node to the rest of the virtual network or on-premises networks.

Step-by-Step Solution

1
Analyze the requirement for Pod IP allocation and NAT.
Pods must receive IP addresses directly from the virtual network subnet and must not use NAT to communicate with external resources.
This is a direct feature of the Azure CNI network model, whereas Kubenet uses NAT for outbound node traffic.
2
Identify the network plugin that supports direct subnet IP allocation.
Azure CNI allocates IPs to Pods from the subnet, whereas Kubenet allocates IPs from a logical private range.
Choosing Azure CNI satisfies both the no-NAT requirement and the direct subnet IP assignment requirement.

Key Concept

Azure CNI assigns IP addresses from the subnet directly to the Pods, avoiding NAT for communication with other resources in the virtual network.
Estimated Time:1m 0s
Rate this question

Topics

Configure Azure Kubernetes Service (AKS)

More questions from this topic