Exam AZ-500 topic 7 question 11 discussion

correct answer is A: "authorized IP address ranges " restricts access to specific IP addresses for reference: https://learn.microsoft.com/en-us/azure/aks/api-server-authorized-ip-ranges?tabs=azure-cli B: an Application Gateway Ingress Controller (AGIC): No because it's manages ingress traffic via Azure Application Gateway. C. a private endpoint: No because it's establishes a private connection through the Azure network. D. a private cluster: No because it's limits API server access to a private virtual network.

This was on the test 5/25/2024

Should be Private Cluster. Authorized IP address range is second option. https://learn.microsoft.com/en-us/azure/architecture/guide/multitenant/service/aks#networking

Private endpoint https://learn.microsoft.com/en-us/azure/aks/private-clusters?tabs=default-basic-networking%2Cazure-portal#use-a-private-endpoint-connection

"authorized IP address ranges " restricts access to specific IP addresses, private enpoints lets you connect with ip that has access to the subnet.

By using a private cluster, you can ensure network traffic between your API server and your node pools remains only on the private network. Source : https://learn.microsoft.com/en-us/azure/aks/private-clusters?tabs=default-basic-networking%2Cazure-portal Question is about ensuring that administrators can access AKS1 only from specific networks, which means you have to use "authorized IP address ranges"

Answer A is correct

https://learn.microsoft.com/en-us/azure/aks/private-clusters?tabs=azure-portal