Exam AZ-700 All Questions

View all questions & answers for the AZ-700 exam

Exam AZ-700 topic 3 question 42 discussion

Actual exam question from Microsoft's AZ-700

Question #: 42
Topic #: 3

You have an on-premises network.

You have an Azure subscription that includes a virtual network named VNet1 and a private Azure Kubernetes Service (AKS) cluster named AKS1. VNet1 is connected to your on-premises environment via an Azure ExpressRoute circuit. AKS1 is connected to VNet1.

You need to implement an off-cluster ingress controller for AKS1. The solution must provide connectivity from the on-premises environment to containerized workloads hosted on AKS1.

Which Azure service should you use?

A. Azure Application Gateway
B. Azure Front Door
C. Azure Traffic Manager
D. Azure Load Balancer

Show Suggested Answer

Suggested Answer: A 🗳️

by seth_saurabh84 at April 6, 2023, 6:20 p.m.

Comments

Submit Cancel

evangelist

1 year, 3 months ago

Selected Answer: A

While Azure Front Door, Azure Traffic Manager, and Azure Load Balancer are also capable of routing and managing network traffic, Azure Application Gateway is more suitable for this scenario because: It can be deployed within a virtual network (VNet), which allows for integration with AKS and provides the ability to route traffic from the on-premises environment (via Azure ExpressRoute) directly to containerized workloads hosted on AKS1. It provides application layer routing capabilities, which are necessary for efficiently managing and routing HTTP(S) traffic to the AKS cluster. It supports features like URL-based routing, multiple-site hosting, and Web Application Firewall (WAF) that can help in enhancing the security and performance of applications hosted on AKS.

upvoted 3 times

...

Lazylinux

1 year, 9 months ago

Selected Answer: A

A is correct as per https://learn.microsoft.com/en-us/azure/application-gateway/tutorial-ingress-controller-add-on-existing

upvoted 4 times

...

flurgen248

2 years, 1 month ago

Selected Answer: A

Answer is A. The Application Gateway Ingress Controller (AGIC) is a Kubernetes application, which makes it possible for Azure Kubernetes Service (AKS) customers to leverage Azure's native Application Gateway L7 load-balancer to expose cloud software to the Internet. https://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-overview

upvoted 2 times

Ben_88

1 year, 12 months ago

But AGIC is within the K8s cluster , question ask for a an ingress controller outside the cluster . would go with D

upvoted 1 times

xRiot007

1 month, 2 weeks ago

You also need layer 7. An LB is only layer 4, so from the start that option is excluded

upvoted 1 times

...

xRiot007

1 month, 2 weeks ago

Azure Application Gateway and AGIC are not the same thing. Answer is A.

upvoted 1 times

...

Apptech

2 years, 1 month ago

A is correct. reference: https://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-overview

upvoted 1 times

...

seth_saurabh84

2 years, 2 months ago

Why not D? AKS by default uses a standard load balancer for ingress. App Gateway will mean we are pointing towards AGIC which is not what the questions mentions.

upvoted 1 times

Feliphus

7 months ago

Azure Load Balancer is the object used by AKS to publish to Internet the AKS workload services, typically you are using it when the service is not the kind cluster-ip, it's where the public-IP is associated to when you run kubectl get svc

upvoted 1 times

...

Marcoos

1 year, 12 months ago

A load balancer will only do layer 4. Ingress controllers, if i remember correctly, will operate on layer 7 in the vast majority of cases. You need layer 7 functionality to do the type of ingress that's asked for.

upvoted 1 times

...

25max

2 years, 2 months ago

The LB is in front of a service and does not provide ingress controller solution for the cluster only for the service that type is LoadBalancer.

upvoted 3 times

...