Examkin

Soru

Zorluk: KolayConfigure Azure Kubernetes Service (AKS)

An administrator is deploying a new Azure Kubernetes Service (AKS) cluster in an environment with an existing virtual network (10.100.0.0/1610.100.0.0/16). To comply with a tenant security mandate, traffic from Pods to on-premises databases must not undergo network address translation (NAT), and each Pod must be assigned a unique, routable IP address from the virtual network subnet (10.100.1.0/2410.100.1.0/24). Which network model should the administrator configure for the AKS cluster?

  1. Azure CNICevap
  2. B
    Kubenet
  3. C
    Azure Private Link
  4. D
    Virtual Network NAT

Cevap

Azure CNI
The correct answer is Azure CNI. Under this model, every Pod gets an IP address from the subnet and can be accessed directly. This avoids network address translation (NAT) for outbound traffic from the node to the rest of the virtual network or on-premises networks.

Adım Adım Çözüm

1
Analyze the requirement for Pod IP allocation and NAT.
Pods must receive IP addresses directly from the virtual network subnet and must not use NAT to communicate with external resources.
This is a direct feature of the Azure CNI network model, whereas Kubenet uses NAT for outbound node traffic.
2
Identify the network plugin that supports direct subnet IP allocation.
Azure CNI allocates IPs to Pods from the subnet, whereas Kubenet allocates IPs from a logical private range.
Choosing Azure CNI satisfies both the no-NAT requirement and the direct subnet IP assignment requirement.

Anahtar Kavram

Azure CNI assigns IP addresses from the subnet directly to the Pods, avoiding NAT for communication with other resources in the virtual network.
Tahmini Süre:1m 0s
Bu soruyu puanla

Konular

Configure Azure Kubernetes Service (AKS)

Bu konudan daha fazla soru