Exam AZ-301 All Questions

View all questions & answers for the AZ-301 exam

Exam AZ-301 topic 6 question 16 discussion

Actual exam question from Microsoft's AZ-301

Question #: 16
Topic #: 6

Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are designing an Azure solution for a company that wants to move a .NET Core web application from an on-premises data center to Azure. The web application relies on a Microsoft SQL Server 2016 database on Windows Server 2016. The database server will not move to Azure.
A separate networking team is responsible for configuring network permissions.
The company uses Azure ExpressRoute and has an ExpressRoute gateway connected to an Azure virtual network named VNET1.
You need to recommend a solution for deploying the web application.
Solution: Deploy the web application by using an Azure Kubernetes Service (AKS) container on VNET1.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️
Instead, use VNet Integration.
Note: VNet Integration gives your web app access to resources in your virtual network. VNet Integration is often used to enable access from apps to a databases and web services running in your VNet.
References:
https://docs.microsoft.com/en-us/azure/app-service/web-sites-integrate-with-vnet

by Karls at Dec. 9, 2019, 8:33 p.m.

Comments

Submit Cancel

Karls

Highly Voted 5 years, 6 months ago

I think "A. Yes" is correct. In this question you need to connect to SQL Database in onpremises, so that if we using both network model with AKS (kubenet or Azure CNI), we can connect to on-premises SQL database. Capability: On-premises access using VPN or Express Route -> Kubenet, Works when initiated by pod (from pod to onpremises) -> With Azure CNI, it's work in both ways (from pod to onpremises and from onpremises to pod). https://docs.microsoft.com/en-us/azure/aks/concepts-network#azure-virtual-networks

upvoted 12 times

kewl

5 years, 6 months ago

Agree. Answer should be Yes

upvoted 3 times

tartar

4 years, 9 months ago

A is ok

upvoted 1 times

hubekpeter

4 years, 4 months ago

You need CNI because it's running windows, and it's missing in the question. So the answer is no. Same with app service plan, there must be premium service plan with vnet intergration. If it's not stated the answer is no.

upvoted 1 times

...

jonnybugaloo

Highly Voted 5 years ago

Guys, this kind of question is a trick to verify where are you focusing. Just deploy the application on AKS doesn't resolve the network layer, which is the main point of the question. You can say to integrate the AKS to the vnet (which is the app vent integration), but it is another step, that it is not mentioned on the solution.

upvoted 8 times

asdfgh1234567

4 years, 11 months ago

"Deploy the web application by using an Azure Kubernetes Service (AKS) container on VNET1." The solution implies that we are using vNet integration.

upvoted 3 times

JohnnyS20

4 years, 9 months ago

No. WE cannot just assume IT IS IMPLIED since IT IS NOT EXPLICITLY MENTIONED.

upvoted 2 times

...

azurecert2021

Most Recent 4 years, 4 months ago

given answer is correct , it should be no ideally it is possible with AKS CNI plugin but they should mentioned specifically this as another basic plugin kubnet is also there which does not support to access onpremise resoruces.

upvoted 1 times

azurecert2021

4 years, 4 months ago

The kubenet networking option is the default configuration for AKS cluster creation.so it has to be mentioned AKS CNI.

upvoted 1 times

azurecert2021

4 years, 4 months ago

https://docs.microsoft.com/en-us/azure/aks/concepts-network?toc=/azure/virtual-network/toc.json

upvoted 1 times

...

glam

4 years, 4 months ago

A. Yes

upvoted 1 times

...

sanketshah

4 years, 5 months ago

A is correct answer.

upvoted 1 times

...

CloudDummyDude

4 years, 9 months ago

I think that Yes, there are multible options for this guest set, not only one. Some might be better than another but these are still possible "Some question sets might have more than one correct solution, while others might not have a correct solution."

upvoted 1 times

...

denkes

4 years, 10 months ago

In my opinion NO. Why should I migrate a "single application running on one Server" into AKS? This is oversized. Before that I would think about Docker, but better just a Web App Plan should be enough.

upvoted 4 times

...

poohtt

4 years, 10 months ago

Is it an error in question wording: "Azure Kubernetes Service (AKS) container "? There is no AKS container. You can deploy only AKS cluster.

upvoted 1 times

...

KCjoe

4 years, 11 months ago

Answer is Yes. "Azure CNI Pods get full virtual network connectivity and can be directly reached via their private IP address from connected networks. Requires more IP address space." https://docs.microsoft.com/en-us/azure/aks/concepts-network

upvoted 1 times

azurecert2021

4 years, 4 months ago

but they have not mentioned CNI

upvoted 1 times

...

DeveshSolanki

5 years ago

Should be Yes

upvoted 1 times

...

tundervirld

5 years ago

I think that if you read the question, can you see "You need to recommend a solution for deploying the web application.". It's about the web application and if you use AKS, you can meet the goal "Move a web to Azure". On the other hand if you need to connect On-Premises sql to your Web in Azure, you have the ExpressRoute and do it by routing.

upvoted 1 times

...

vrana

5 years, 1 month ago

since it is easier to run it as app service so recommending it will be better than AKS, which will do the job but more work is involved. hence looks like it has been given No.

upvoted 2 times

asdfgh1234567

4 years, 11 months ago

yeah but just because its more work doesn't mean it doesnt meet the goal.

upvoted 1 times

...

mjdfreeiotcloud

5 years, 3 months ago

https://docs.microsoft.com/en-us/azure/aks/concepts-network#azure-virtual-networks " On-premises access using VPN or Express Route Works when initiated by pod "

upvoted 2 times

...