AKS Authentication Configuration

What you'll be asked

1. Which authentication method is the recommended best practice for integrating Azure Kubernetes Service (AKS) with Microsoft Entra ID?
2. When configuring RBAC for an AKS cluster, what is the primary difference between ClusterRole and Role?
3. You need to ensure that only specific users can access the AKS API server based on their group membership in Microsoft Entra ID. Where should you define these group-based access rules?
4. An administrator wants to disable local account authentication for an AKS cluster to enforce stricter security. Which configuration change is required?
5. You are auditing an AKS cluster and notice that the 'system:masters' group is bound to several user accounts. Why is this a major security risk?

Answers and explanations come after you submit.