Exam AZ-304 topic 5 question 19 discussion

Actual exam question from Microsoft's AZ-304

Question #: 19
Topic #: 5

You are designing a microservices architecture that will use Azure Kubernetes Service (AKS) to host pods that run containers. Each pod deployment will host a separate API. Each API will be implemented as a separate service.
You need to recommend a solution to make the APIs available to external users from Azure API Management. The solution must meet the following requirements:
✑ Control access to the APIs by using mutual TLS authentication between API Management and the AKS-based APIs.
✑ Provide access to the APIs by using a single IP address.
What should you recommend to provide access to the APIs?

A. the LoadBalancer service in AKS
B. custom network security groups (NSGs)
C. the Ingress Controller in AKS

Show Suggested Answer

Suggested Answer: C 🗳️
An ingress controller is a piece of software that provides reverse proxy, configurable traffic routing, and TLS termination for Kubernetes services. Kubernetes ingress resources are used to configure the ingress rules and routes for individual Kubernetes services. Using an ingress controller and ingress rules, a single IP address can be used to route traffic to multiple services in a Kubernetes cluster.
Reference:
https://docs.microsoft.com/en-us/azure/aks/ingress-basic

by chijokz at March 14, 2021, 3:37 p.m.

Comments

Submit Cancel

Muhammad_G

Highly Voted 4 years, 2 months ago

Correct

upvoted 18 times

...

chijokz

Highly Voted 4 years, 3 months ago

Given answer is 100% correct,

upvoted 12 times

...

Simon_G

Most Recent 3 years, 3 months ago

C. Ingress Controller better link: https://docs.microsoft.com/en-us/azure/api-management/api-management-kubernetes#option-2-install-an-ingress-controller

upvoted 1 times

...

syu31svc

3 years, 8 months ago

Provided link supports answer given

upvoted 2 times

...

alphaarun

3 years, 11 months ago

Correct

upvoted 5 times

...