nerdexam
Microsoft

AZ-305 · Question #52

You are designing a microservices architecture that will be hosted in an Azure Kubernetes Service (AKS) cluster. Apps that will consume the microservices will be hosted on Azure virtual machines…

The correct answer is D. Azure API Management Premium tier with virtual network connection. One option is to deploy APIM (API Management) inside the cluster VNet. The AKS cluster and the applications that consume the microservices might reside within the same VNet, hence there is no reason to expose the cluster publicly as all API traffic will remain within the VNet…

Submitted by ricky.ec· Mar 6, 2026Design infrastructure solutions

Question

You are designing a microservices architecture that will be hosted in an Azure Kubernetes Service (AKS) cluster. Apps that will consume the microservices will be hosted on Azure virtual machines. The virtual machines and the AKS cluster will reside on the same virtual network. You need to design a solution to expose the microservices to the consumer apps. The solution must meet the following requirements: Ingress access to the microservices must be restricted to a single private IP address and protected by using mutual TLS authentication. The number of incoming microservice calls must be rate-limited. Costs must be minimized. What should you include in the solution?

Options

  • AAzure App Gateway with Azure Web Application Firewall (WAF)
  • BAzure API Management Standard tier with a service endpoint
  • CAzure Front Door with Azure Web Application Firewall (WAF)
  • DAzure API Management Premium tier with virtual network connection

How the community answered

(35 responses)
  • A
    14% (5)
  • B
    6% (2)
  • C
    20% (7)
  • D
    60% (21)

Explanation

One option is to deploy APIM (API Management) inside the cluster VNet. The AKS cluster and the applications that consume the microservices might reside within the same VNet, hence there is no reason to expose the cluster publicly as all API traffic will remain within the VNet. For these scenarios, you can deploy API Management into the cluster VNet. API Management Premium tier supports VNet deployment. https://docs.microsoft.com/en-us/azure/api-management/api-management-kubernetes

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-305 Practice