Microsoft
AZ-204 · Question #121
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might…
The correct answer is B. No. Instead create an AKS cluster that supports network policy. Create and apply a network to allow traffic only from within a defined namespace https://docs.microsoft.com/en-us/azure/aks/use-network-policies
Submitted by layla.eg· Mar 30, 2026Develop Azure compute solutions
Question
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this question, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You are developing a solution that will be deployed to an Azure Kubernetes Service (AKS) cluster. The solution will include a custom VNet, Azure Container Registry images, and an Azure Storage account. The solution must allow dynamic creation and management of all Azure resources within the AKS cluster. You need to configure an AKS cluster for use with the Azure APIs. Solution: Enable the Azure Policy Add-on for Kubernetes to connect the Azure Policy service to the GateKeeper admission controller for the AKS cluster. Apply a built-in policy to the cluster. Does the solution meet the goal?
Options
- AYes
- BNo
How the community answered
(26 responses)- A31% (8)
- B69% (18)
Explanation
Instead create an AKS cluster that supports network policy. Create and apply a network to allow traffic only from within a defined namespace https://docs.microsoft.com/en-us/azure/aks/use-network-policies
Topics
#AKS#Azure Container Registry#VNet integration#managed identity
Community Discussion
No community discussion yet for this question.