Exam AZ-500 topic 3 question 66 discussion

Actual exam question from Microsoft's AZ-500

Question #: 66
Topic #: 3

You have a Microsoft Entra tenant named Contoso.com and an Azure Kubernetes Service (AKS) cluster AKS1.

You discover that AKS1 cannot be accessed by using accounts from Contoso.com.

You need to ensure AKS1 can be accessed by using accounts from Contoso.com. The solution must minimize administrative effort.

What should you do first?

A. From Azure, recreate AKS1.
B. From AKS1, upgrade the version of Kubernetes.
C. From Microsoft Entra, add a Microsoft Entra ID P2 license.
D. From Microsoft Entra, configure the User settings.

Show Suggested Answer

Suggested Answer: A 🗳️

by mrt007 at March 30, 2024, 8:04 a.m.

Comments

Submit Cancel

mmmyo

1 month ago

Selected Answer: D

✅ Configuring Microsoft Entra User settings ensures that users from Contoso.com have the correct authentication policies and permissions to access AKS. ✅ This is the least administratively complex solution, as it does not require rebuilding AKS1 or upgrading Kubernetes.

upvoted 1 times

...

Abdullah14

9 months, 1 week ago

Selected Answer: A

account accesses happens in the phase of creation of the kubernetes service

upvoted 3 times

...

chiquito

1 year, 2 months ago

Answer A: is correct This was already sorted out under : Question #42Topic 3 The following limitations apply: Azure AD can only be enabled on Kubernetes RBAC-enabled cluster. Azure AD legacy integration can only be enabled during cluster creation. Reference: https://docs.microsoft.com/en-us/azure/aks/azure-ad-integration-cli

upvoted 2 times

...

mrt007

1 year, 2 months ago

Given the options, the best first step would be: D. From Microsoft Entra, configure the User settings. This would involve setting up the necessary permissions for Contoso.com accounts to access the AKS1 cluster. This is a more direct solution compared to the other options and requires less administrative effort. Recreating the AKS cluster or upgrading Kubernetes wouldn’t necessarily resolve an access issue, and adding a Microsoft Entra ID P2 license is not directly related to access management.

upvoted 2 times

...