Exam AZ-304 topic 5 question 2 discussion

Not sure why the discussions are gone... but the right answer should be B, as per previous discussions

B: Web App for Containers CI-CD https://azure.microsoft.com/en-au/services/app-service/containers/ Authntication https://docs.microsoft.com/en-us/azure/app-service/overview-authentication-authorization#:~:text=Azure%20App%20Service%20provides%20built,end%2C%20and%20also%20Azure%20Functions.

Azure App Service is a fully managed platform that supports running containerized applications, and it meets all the specified requirements: Support autoscaling: Azure App Service supports autoscaling natively. You can configure it to automatically scale out or scale in based on various metrics such as CPU usage, memory usage, request queue length, etc. Support continuous deployment from an Azure Container Registry: Azure App Service has built-in integration with Azure Container Registry. You can set up continuous deployment such that new container images pushed to the registry can automatically trigger a deployment to the app service. Provide built-in functionality to authenticate app users by using Azure Active Directory (Azure AD): Azure App Service supports easy authentication and authorization setup with Azure Active Directory, without needing to write any code for it. It can be configured directly from the Azure portal.

As per MS (https://docs.microsoft.com/en-us/azure/architecture/guide/technology-choices/compute-decision-tree), they recommend using Azure App Service if you are not creating micro services. Both Azure App Service, and AKS support auto-scaling, CI/CD from Azure App Registry and built-in integration with Azure AD. Hence, I think B is the recommendation from MS for this scenario.

"authenticate app users by using Azure Active Directory" and "host containerized django app". 1)App users most likely mean AAD B2C. AAD integration for AKS is for managing AKS cluster not app users 2) Using AKS will be overkill for just a containerized app Answer is B.

Azure App Service provides built-in authentication and authorization capabilities.. https://docs.microsoft.com/en-us/azure/app-service/overview-authentication-authorization it supports auto scaling and CI/CD as well.

C is the right option. Azure Kubernetes Service (AKS) can be configured to use Azure Active Directory (AD) for user authentication. In this configuration, you can log into an AKS cluster using an Azure AD authentication token https://docs.microsoft.com/en-us/azure/aks/azure-ad-integration-cli#:~:text=Azure%20Kubernetes%20Service%20(AKS)%20can,an%20Azure%20AD%20authentication%20token.

https://docs.microsoft.com/en-us/azure/architecture/guide/technology-choices/compute-decision-tree

Correct answer

Both B & C are correct in my view. Can someone explain why can't it be Option C- AKS over Option B?

Support autoscaling so A is out Authenticate using Azure AD https://docs.microsoft.com/en-us/azure/app-service/configure-authentication-provider-aad Answer is B

B. Azure App Service for containers Here is the default recommendation from MS https://docs.microsoft.com/en-us/dotnet/architecture/modernize-with-azure-containers/modernize-existing-apps-to-cloud-optimized/choosing-azure-compute-options-for-container-based-applications ACI is for simple app App service is good for Single monolithic app Here is also an decision tree https://docs.microsoft.com/en-us/azure/architecture/guide/technology-choices/compute-decision-tree

Option B ricks all the requirement boxes, I will go for B.

I would agree with B, seems like the best fit. All the requirements are mentioned on the overview page. https://azure.microsoft.com/en-gb/services/app-service/#overview React to traffic loads with Azure Autoscale and perform traffic routing and load-balancing through Azure Front Door. Use Azure Active Directory and other popular identity providers to authenticate and authorise app access. Streamline CI/CD with Git, GitHub, GitHub Actions, Atlassian Bitbucket, Azure DevOps, Docker Hub and Azure Container Registry.

The question also requires auto scaling, thus it is recommended to use AKS. https://docs.microsoft.com/en-us/azure/container-instances/container-instances-overview

Both B & C seem right. I think the question is missing some condition which will help to pick one option.

No reason why not B