Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Exam AZ-104 topic 5 question 87 discussion

Actual exam question from Microsoft's AZ-104
Question #: 87
Topic #: 5
[All AZ-104 Questions]

You have an Azure subscription.
You are deploying an Azure Kubernetes Service (AKS) cluster that will contain multiple pods. The pods will use kubernet networking.
You need to restrict network traffic between the pods.
What should you configure on the AKS cluster?

  • A. the Azure network policy
  • B. the Calico network policy
  • C. pod security policies
  • D. an application security group
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
Reference:
https://docs.microsoft.com/en-us/azure/aks/use-network-policies

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
ninjia
Highly Voted 2 years, 4 months ago
Selected Answer: B
I think the correct answer is B. The question describes “the pods will use kubernet networking.” To provide network connectivity, AKS clusters can use kubenet (basic networking) or Azure CNI (advanced networking). Azure Network Policies supports Azure CNI only. Calico Network Policies supports both Azure CNI (Windows Server 2019 and Linux) and kubenet (Linux). Hence, the correct answer is B. Reference https://docs.microsoft.com/en-us/azure/aks/use-network-policies https://docs.microsoft.com/en-us/azure/aks/configure-kubenet
upvoted 40 times
RougePotatoe
1 year, 2 months ago
To summarize. You need calico network policy because this question explicitly stated "pods will use kubernet networking." which means you need a policy that can support kubernet networking. Look at supported networking options of the following link. https://learn.microsoft.com/en-us/azure/aks/use-network-policies#differences-between-azure-network-policy-manager-and-calico-network-policy-and-their-capabilities
upvoted 7 times
...
...
ITprof99
Highly Voted 2 years, 3 months ago
On exam 01.02.22 Answer: B
upvoted 18 times
...
Amir1909
Most Recent 1 month, 3 weeks ago
B is correct
upvoted 2 times
...
YesPlease
6 months, 1 week ago
Selected Answer: B
B) Calico Network Policies Question specifically calls out Kubernet: https://learn.microsoft.com/en-us/azure/aks/use-network-policies#differences-between-azure-network-policy-manager-and-calico-network-policy-and-their-capabilities
upvoted 1 times
...
muzzying
6 months, 1 week ago
If you go to AKS in the portal and try to create, selecting the Kubernet networking will grey out the 'Azure Network Policy' leaving only the 'Calico' policy to choose.
upvoted 1 times
...
Tomix
9 months, 4 weeks ago
Option A: Azure network policy Azure network policy provides a built-in network security solution for AKS clusters. It allows you to define network traffic rules at the Kubernetes namespace level using standard Kubernetes NetworkPolicy objects. With Azure network policy, you can control ingress (incoming) and egress (outgoing) network traffic between pods based on IP addresses, ports, and protocols.
upvoted 1 times
...
Haroldgm
10 months ago
Selected Answer: B
In the exam June 24, 2023
upvoted 3 times
...
ojogbon
1 year ago
On the exam Apr 2nd, 2023
upvoted 6 times
...
CyberKelev
1 year, 1 month ago
Selected Answer: A
To restrict network traffic between pods in an Azure Kubernetes Service (AKS) cluster, you should configure the Azure network policy.
upvoted 2 times
...
zellck
1 year, 2 months ago
Selected Answer: B
B is the answer. https://learn.microsoft.com/en-us/azure/aks/use-network-policies#differences-between-azure-network-policy-manager-and-calico-network-policy-and-their-capabilities
upvoted 3 times
zellck
1 year, 2 months ago
Got this in Feb 2023 exam.
upvoted 3 times
...
zellck
1 year, 2 months ago
Calico Network Policy Supported networking options - Azure CNI (Linux, Windows Server 2019 and 2022) and kubenet (Linux)
upvoted 1 times
...
...
typales2005
1 year, 3 months ago
Selected Answer: B
was in the 09/01/2023 exam
upvoted 7 times
...
klexams
1 year, 5 months ago
B for kubenet. Azure NPM: Linux, Windows Server 2022 Azure CNI Calico Network Policy: Linux, Windows Server 2019 and 2022 Azure CNI (Linux, Windows Server 2019 and 2022) and kubenet (Linux)
upvoted 2 times
...
Makarand123
1 year, 6 months ago
There's other way also using 'linkered' service mesh but not given here
upvoted 1 times
...
EmnCours
1 year, 7 months ago
Selected Answer: B
B. the Calico network policy Most Voted
upvoted 1 times
...
ajayasa
2 years, 1 month ago
this question was there on 16/03/2022 with same question and passed with 900 percent
upvoted 1 times
...
mmtechsolutionsinc
2 years, 1 month ago
Selected Answer: B
I think the correct answer is B. The question describes “the pods will use kubernet networking.” To provide network connectivity, AKS clusters can use kubenet (basic networking) or Azure CNI (advanced networking). Azure Network Policies supports Azure CNI only. Calico Network Policies supports both Azure CNI (Windows Server 2019 and Linux) and kubenet (Linux). Hence, the correct answer is B. Reference https://docs.microsoft.com/en-us/azure/aks/use-network-policies https://docs.microsoft.com/en-us/azure/aks/configure-kubenet
upvoted 3 times
...
theorut
2 years, 1 month ago
Caligula policy.
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...