Exam AZ-204 topic 3 question 15 discussion

Actual exam question from Microsoft's AZ-204

Question #: 15
Topic #: 3

DRAG DROP -
You are developing a microservices solution. You plan to deploy the solution to a multinode Azure Kubernetes Service (AKS) cluster.
You need to deploy a solution that includes the following features:
✑ reverse proxy capabilities
✑ configurable traffic routing
✑ TLS termination with a custom certificate
Which components should you use? To answer, drag the appropriate components to the correct requirements. Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Select and Place:

Show Suggested Answer

Suggested Answer:

Box 1: Helm -
To create the ingress controller, use Helm to install nginx-ingress.

Box 2: kubectl -
To find the cluster IP address of a Kubernetes pod, use the kubectl get pod command on your local machine, with the option -o wide .

Box 3: Ingress Controller -
An ingress controller is a piece of software that provides reverse proxy, configurable traffic routing, and TLS termination for Kubernetes services. Kubernetes ingress resources are used to configure the ingress rules and routes for individual Kubernetes services.
Incorrect Answers:
Virtual Kubelet: Virtual Kubelet is an open-source Kubernetes kubelet implementation that masquerades as a kubelet. This allows Kubernetes nodes to be backed by Virtual Kubelet providers such as serverless cloud container platforms.
CoreDNS: CoreDNS is a flexible, extensible DNS server that can serve as the Kubernetes cluster DNS. Like Kubernetes, the CoreDNS project is hosted by the
CNCF.
Reference:
https://docs.microsoft.com/bs-cyrl-ba/azure/aks/ingress-basic https://www.digitalocean.com/community/tutorials/how-to-inspect-kubernetes-networking

by Leandromellor at Nov. 10, 2020, 9:59 a.m.

Comments

Submit Cancel

mlantonis

Highly Voted 3 years, 6 months ago

Box 1: Helm Helm helps you manage Kubernetes applications — Helm Charts help you define, install, and upgrade even the most complex Kubernetes application. To create the ingress controller, use Helm to install nginx-ingress. Box 2: Kubectl The Kubernetes command-line tool, kubectl, allows you to run commands against Kubernetes clusters. To find the cluster IP address of a Kubernetes pod, use the kubectl get pod command on your local machine, with the option -o wide . Box 3: Ingress Controller An ingress controller is a piece of software that provides reverse proxy, configurable traffic routing, and TLS termination for Kubernetes services. Kubernetes ingress resources are used to configure the ingress rules and routes for individual Kubernetes services. Using an ingress controller and ingress rules, a single IP address can be used to route traffic to multiple services in a Kubernetes cluster.

upvoted 76 times

mlantonis

3 years, 6 months ago

Reference: https://helm.sh https://kubernetes.io/docs/tasks/tools https://kubernetes.io/docs/concepts/services-networking/ingress-controllers https://docs.microsoft.com/bs-cyrl-ba/azure/aks/ingress-basic https://www.digitalocean.com/community/tutorials/how-to-inspect-kubernetes-networking

upvoted 9 times

...

robin1337

2 years, 8 months ago

Correct, I am a certified CKA und CKAD. The question isn't that well written though as you could also deploy a solution with kubectl...

upvoted 11 times

...

Leandromellor

Highly Voted 4 years ago

I believe there is no AKS question in the exam: https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RE4oZ7B

upvoted 19 times

matejka

4 years ago

Haven't done the exam yet, but found many comments (eg. on Udemy tutorials) that Kuberentes actually IS part of the exam.

upvoted 6 times

luppittegui

3 years, 12 months ago

It's not: https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RE4oZ7B "Azure Kubernetes Service (AKS) is out of scope"

upvoted 4 times

Cornholioz

3 years, 11 months ago

And yet, here we are with this question. I'm guessing it has appeared in the exam and hence here. I am wondering what's actually "excluded" from Azure in this weird exam. Can't say it for many, but this one is a poorly constructed exam.

upvoted 7 times

...