Exam SC-100 topic 3 question 37 discussion

Actual exam question from Microsoft's SC-100

Question #: 37
Topic #: 3

You have an on-premises datacenter and an Azure Kubernetes Service (AKS) cluster named AKS1.

You need to restrict internet access to the public endpoint of AKS1. The solution must ensure that AKS1 can be accessed only from the public IP addresses associated with the on-premises datacenter.

What should you use?

A. a private endpoint
B. a network security group (NSG)
C. a service endpoint
D. an authorized IP range

Show Suggested Answer

Suggested Answer: D 🗳️

by shanti0091 at Oct. 7, 2023, 12:38 a.m.

Comments

Submit Cancel

mohamed1999

Highly Voted 1 year ago

Selected Answer: D

https://learn.microsoft.com/en-us/azure/aks/limit-egress-traffic

upvoted 5 times

mohamed1999

1 year ago

Access to the AKS control plane can be protected by API server authorized IP ranges, including the firewall public frontend IP address

upvoted 1 times

...

Intrudire

Most Recent 1 year, 1 month ago

Selected Answer: D

"To secure access to the otherwise publicly accessible AKS control plane / API server, you can enable and use authorized IP ranges." https://learn.microsoft.com/en-us/azure/aks/api-server-authorized-ip-ranges

upvoted 2 times

...

TheCloudGuruu

1 year, 1 month ago

Selected Answer: D

Using an authorized IP range provides the specific control needed for allowing access only from the designated public IP addresses associated with the on-premises datacenter.

upvoted 2 times

...