Exam AZ-500 topic 1 question 15 discussion

answer is correct

A is the answer. https://learn.microsoft.com/en-us/azure/virtual-network/container-networking-overview Bring the rich set of Azure network capabilities to containers, by utilizing the same software defined networking stack that powers virtual machines. The Azure Virtual Network container network interface (CNI) plug-in installs in an Azure Virtual Machine. The plug-in assigns IP addresses from a virtual network to containers brought up in the virtual machine, attaching them to the virtual network, and connecting them directly to other containers and virtual network resources. The plug-in doesn’t rely on overlay networks, or routes, for connectivity, and provides the same performance as virtual machines.

https://learn.microsoft.com/en-us/azure/virtual-network/vnet-integration-for-azure-services

Hey folks, just wanted to clarify this one. A lot of people are picking A. Yes because of the CNI docs, but this question is about a regular Ubuntu VM running Docker, not AKS or Kubernetes. In this setup, Docker containers can already access Azure Storage and SQL via Service Endpoints as long as the VM is in the right subnet — which the question says it is. You don’t need to install the CNI plugin for that. So the correct answer here is B. No. Hope that helps!

Answer: A, Yes Reason: Installing the Container Network Interface (CNI) plugin is the correct solution as it enables containers to use the host's networking capabilities, including service endpoints configured on the VM's subnet. Reference: https://learn.microsoft.com/en-us/azure/virtual-network/container-networking-overview

A is the answer. Bring the rich set of Azure network capabilities to containers, by utilizing the same software defined networking stack that powers virtual machines. The Azure Virtual Network container network interface (CNI) plug-in installs in an Azure Virtual Machine. The plug-in assigns IP addresses from a virtual network to containers brought up in the virtual machine, attaching them to the virtual network, and connecting them directly to other containers and virtual network resources. The plug-in doesn’t rely on overlay networks, or routes, for connectivity, and provides the same performance as virtual machines.

Answer: A Explanation: The Azure Virtual Network container network interface (CNI) plug-in installs in an Azure Virtual Machine. The plug-in supports both Linux and Windows platform. The plug-in assigns IP addresses from a virtual network to containers brought up in the virtual machine, attaching them to the virtual network, and connecting them directly to other containers and virtual network resources. The plug-in doesn't rely on overlay networks, or routes, for connectivity, and provides the same performance as virtual machines.

Yes, the solution meets the goal. By installing the container network interface (CNI) plug-in on the virtual machine, you enable the Docker containers to be attached to the Azure virtual network and utilize the same network connectivity as the virtual machine. This allows the containers to access Azure Storage resources and Azure SQL databases via the service endpoint configured for the subnet. Therefore, the solution aligns with the requirement of ensuring that the containers can access the specified Azure resources via the service endpoint. https://learn.microsoft.com/en-us/azure/virtual-network/container-networking-overview

A is the answer.

The container network interface (CNI) plug-in is responsible for providing network connectivity to containers running on a host. Answer is correct.

There are two ways to assign IPs to containers Kubectl: It will create a new Vnet for cluster. Azure CNI: It can either llow ypu to use existing vnet or create new vnet. As per Q. Answer is YES, Coz CNI can allow you to give ip from exiting vnet(Subnet),As we already have Service endpoints configure, the Container can directly talk to SQL, storage.

Answer from GPT is no: No, installing the CNI plug-in on the virtual machine will not achieve the goal. The goal is to ensure that Docker containers deployed to the VM can access Azure Storage and SQL DB via the service endpoint configured on the subnet. Installing the CNI plug-in will create network interfaces for Docker containers and attach them to networks. However, it does not configure routing rules to direct traffic to the service endpoint. To meet the goal, you need to perform the following: 1. Install the Azure CLI on the Ubuntu VM 2. Install Docker on the VM 3. Restart the Docker service to pick up the environment variables 4. Add routing rules to direct traffic from containers to the subnet's service endpoint 5. Deploy containers and test access to Storage/SQL DB. So in summary, installing the CNI plug-in alone will not configure the network routing needed for the containers to utilize the service endpoint. Additional configuration using the Azure CLI is required. Therefore, the solution does not meet the goal. The correct option is B - No.

A. Answer is YES

This is just a question about Linux / Docer rather than AKS. No need for CNI. 'No' is the answer.

Answer is Yes because this is what container docker interface is used for

perfect - correct answer

given answer is correct