nerdexam
Microsoft

AZ-204 · Question #136

Drag and Drop Question You are preparing to deploy an application to an Azure Kubernetes Service (AKS) cluster. The application must only be available from within the VNet that includes the cluster…

The correct answer is Service; azure-load-balancer-internal; LoadBalancer. To expose an application internally within a VNet in AKS, you need a Kubernetes 'Service' resource with type 'LoadBalancer' and the annotation 'service.beta.kubernetes.io/azure-load-balancer-internal: true' (represented by the 'azure-load-balancer-internal' segment). This…

Submitted by marco_it· Mar 30, 2026Deploy and manage Azure Kubernetes Service (AKS) workloads - specifically configuring internal-only service exposure using Azure internal load balancers within AKS clusters.

Question

Drag and Drop Question You are preparing to deploy an application to an Azure Kubernetes Service (AKS) cluster. The application must only be available from within the VNet that includes the cluster. You need to deploy the application. How should you complete the deployment YAML? To answer, drag the appropriate YAML segments to the correct locations. Each YAML segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Answer:

Exhibit

AZ-204 question #136 exhibit

Answer Area

Drag items

IngressServiceLoadBalancerDeploymentingress.classazure-load-balancer-internal

Correct arrangement

  • Service
  • azure-load-balancer-internal
  • LoadBalancer

Explanation

To expose an application internally within a VNet in AKS, you need a Kubernetes 'Service' resource with type 'LoadBalancer' and the annotation 'service.beta.kubernetes.io/azure-load-balancer-internal: true' (represented by the 'azure-load-balancer-internal' segment). This combination tells Azure to provision an internal Azure Load Balancer with a private IP address instead of a public one, restricting access to within the VNet. The annotation is the critical piece that prevents a public-facing endpoint from being created.

Topics

#AKS Networking#Internal Load Balancer#Kubernetes Services#Azure Annotations

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-204 Practice