Configuring AKS Network Isolation

5 questions Pass: 70% +25 pts (50 with Pro)

Quiz covering Advanced Security for Compute

What you'll be asked

  1. Which Azure feature allows you to restrict traffic to an Azure Kubernetes Service (AKS) cluster by ensuring the API server is only accessible from within your private virtual network?
  2. When using Azure CNI with Network Policies, which plugin is recommended for enforcing granular traffic flow rules between pods?
  3. You need to ensure that all outbound traffic from your AKS pods passes through a central firewall appliance. Which configuration is required?
  4. Which of the following is the most secure way to handle secrets in AKS to ensure they are not stored in plain text within the cluster's etcd database?
  5. You are implementing a zero-trust architecture. You have a pod that requires access to an Azure SQL Database. What is the most secure method to grant this access without using static connection strings or keys?

Answers and explanations come after you submit.