Exam AZ-104 topic 5 question 87 discussion

I think the correct answer is B. The question describes “the pods will use kubernet networking.” To provide network connectivity, AKS clusters can use kubenet (basic networking) or Azure CNI (advanced networking). Azure Network Policies supports Azure CNI only. Calico Network Policies supports both Azure CNI (Windows Server 2019 and Linux) and kubenet (Linux). Hence, the correct answer is B. Reference https://docs.microsoft.com/en-us/azure/aks/use-network-policies https://docs.microsoft.com/en-us/azure/aks/configure-kubenet

On exam 01.02.22 Answer: B

To restrict network traffic between the pods in an Azure Kubernetes Service (AKS) cluster, you should configure the Calico network policy. Therefore, the correct answer is: B. the Calico network policy

B is correct: Network policy options in AKS Azure provides three Network Policy engines for enforcing network policies: Cilium for AKS clusters that use Azure CNI Powered by Cilium. Azure Network Policy Manager. Calico, an open-source network and network security solution founded by Tigera.

B is correct

AKS is no longer on this exam.

B is correct

B) Calico Network Policies Question specifically calls out Kubernet: https://learn.microsoft.com/en-us/azure/aks/use-network-policies#differences-between-azure-network-policy-manager-and-calico-network-policy-and-their-capabilities

If you go to AKS in the portal and try to create, selecting the Kubernet networking will grey out the 'Azure Network Policy' leaving only the 'Calico' policy to choose.

Option A: Azure network policy Azure network policy provides a built-in network security solution for AKS clusters. It allows you to define network traffic rules at the Kubernetes namespace level using standard Kubernetes NetworkPolicy objects. With Azure network policy, you can control ingress (incoming) and egress (outgoing) network traffic between pods based on IP addresses, ports, and protocols.

In the exam June 24, 2023

On the exam Apr 2nd, 2023

To restrict network traffic between pods in an Azure Kubernetes Service (AKS) cluster, you should configure the Azure network policy.

B is the answer. https://learn.microsoft.com/en-us/azure/aks/use-network-policies#differences-between-azure-network-policy-manager-and-calico-network-policy-and-their-capabilities

was in the 09/01/2023 exam

B for kubenet. Azure NPM: Linux, Windows Server 2022 Azure CNI Calico Network Policy: Linux, Windows Server 2019 and 2022 Azure CNI (Linux, Windows Server 2019 and 2022) and kubenet (Linux)

There's other way also using 'linkered' service mesh but not given here