Examkin

Question

Difficulty: MediumContainer-Based Workloads

An energy utility company is designing a new container-based monitoring solution on Azure. The solution must support two environments: Production and Test.

The design must satisfy the following requirements:
* The containerized workloads in Production and Test must be completely isolated from each other at the network and compute levels.
* Administrative and operational overhead for managing the container infrastructure must be minimized.
* System logs from the Production environment must be stored in a different Log Analytics workspace than the Test environment logs to comply with strict data sovereignty policies.

Which two recommendations should you include in the infrastructure design? (Select two.)

  1. Create a dedicated Log Analytics workspace for the Production environment and another dedicated Log Analytics workspace for the Test environment.Answer
  2. B
    Create a single Log Analytics workspace for both environments and use custom tables to segregate the logs.
  3. Deploy a separate Azure Container Apps environment for the Production workloads and the Test workloads.Answer
  4. D
    Deploy a single Azure Container Apps environment and use separate container apps to run the Production and Test workloads.
  5. E
    Deploy an Azure Kubernetes Service (AKS) cluster and use namespaces to segregate the Production and Test workloads.

Answer

Deploy a separate Azure Container Apps environment for the Production workloads and the Test workloads, and create a dedicated Log Analytics workspace for the Production environment and another dedicated Log Analytics workspace for the Test environment.
To satisfy the requirements of network/compute isolation and minimal administrative overhead, deploying separate Azure Container Apps environments is the best practice. Since Azure Container Apps environments write logs to a single associated Log Analytics workspace, using separate environments allows mapping Production and Test to separate, dedicated Log Analytics workspaces. This satisfies the requirement to store logs in different workspaces for compliance reasons.

Step-by-Step Solution

1
Evaluate the hosting options based on the operational overhead constraints.
Azure Container Apps is selected as it is a serverless platform that minimizes administrative overhead compared to managing an Azure Kubernetes Service cluster.
The requirement states that administrative and operational overhead for managing the container infrastructure must be minimized.
2
Analyze how to achieve complete network and compute isolation for the containerized workloads.
Separate Azure Container Apps environments are required because a single environment shares the same virtual network and underlying compute resources.
The workloads must be completely isolated at the network and compute levels.
3
Align the logging configuration with the environment isolation and workspace requirements.
Two dedicated Log Analytics workspaces are created and mapped to the separate Container Apps environments.
Azure Container Apps environments log to a single workspace. To segregate logs between Production and Test, separate workspaces and separate Container Apps environments are necessary.

Key Concept

Selecting container hosting services and designing isolation boundaries and logging architectures based on administrative, network, and compliance requirements.
Rate this question

Topics

Container-Based Workloads

More questions from this topic