Question

Difficulty: MediumRun Containerized Solutions using Azure Container Instances

You are preparing to deploy a container group to Azure Container Instances (ACI). The container group must connect to an Azure SQL Database that is secured within an Azure Virtual Network (VNet). You need to deploy the container group into the VNet. Which two requirements must be met to deploy the container group into the virtual network? (Choose two.)

  1. The destination subnet must be delegated to the Microsoft.ContainerInstance/containerGroups service.Answer
  2. The container group must be deployed to the same Azure region as the virtual network.Answer
  3. C
    The container group must be configured with a system-assigned managed identity to bypass subnet delegation.
  4. D
    The container group deployment must authenticate with Azure Container Registry (ACR) using az acr login to validate the subnet configuration.

Answer

The correct requirements are that the destination subnet must be delegated to the Microsoft.ContainerInstance/containerGroups service, and the container group must be deployed to the same Azure region as the virtual network.
Deploying a container group into an Azure Virtual Network requires delegating the destination subnet to the Microsoft.ContainerInstance/containerGroups service so that ACI can create network interfaces. Furthermore, the container group must be deployed in the same Azure region as the virtual network.

Step-by-Step Solution

1
Ensure region matching.
The container group and the target virtual network are in the same Azure region.
ACI VNet integration requires the container group and VNet to share the same region.
2
Configure subnet delegation.
The subnet is delegated to the Microsoft.ContainerInstance/containerGroups service.
Subnet delegation is mandatory to allow ACI to provision network interfaces in the VNet.

Key Concept

Azure Container Instances virtual network integration requirements
Rate this question