Examkin

Question

Difficulty: MediumRun Containerized Solutions using Azure Container Instances

A development team is deploying a containerized microservice to Azure Container Instances (ACI). The containerized microservice must securely connect to a database hosted in an Azure Virtual Network (VNet) without exposing the database to the public internet. The microservice uses a custom Linux-based container image. Which configuration is required to successfully deploy the container group into the Azure Virtual Network?

  1. The target subnet must be delegated to Microsoft.ContainerInstance/containerGroups and must not contain other resource types.Answer
  2. B
    The container group must be configured with a system-assigned managed identity to authorize the virtual network integration.
  3. C
    The target subnet must be configured with a service endpoint for Microsoft.Web/serverfarms to allow App Service compute access.
  4. D
    The container group must mount a secret volume containing an Azure Key Vault access policy token to authenticate network requests.

Answer

The target subnet must be delegated to Microsoft.ContainerInstance/containerGroups and must not contain other resource types.
The correct answer is that the target subnet must be delegated to Microsoft.ContainerInstance/containerGroups and must not contain other resource types. Azure Container Instances requires a dedicated subnet delegated exclusively to ACI for virtual network integration. This subnet cannot be shared with other resource types, such as virtual machines or App Service plans.

Step-by-Step Solution

1
Identify the requirement for network isolation and virtual network integration for Azure Container Instances.
Confirming that ACI container groups can be deployed directly into an Azure Virtual Network to communicate securely with other resources.
This establishes private network routing and secures the database connection.
2
Determine the subnet constraints and delegation requirements for ACI.
The target subnet must be delegated exclusively to the Microsoft.ContainerInstance/containerGroups resource provider.
Subnet delegation is mandatory for ACI network integration and prevents other resource types from sharing the subnet.

Key Concept

Azure Container Instances Virtual Network Integration and Subnet Delegation
Estimated Time:1m 30s
Rate this question

Topics

Run Containerized Solutions using Azure Container Instances

More questions from this topic