AZ-400 · Question #80
Drag and Drop Question You plan to use Azure Kubernetes Service (AKS) to host containers deployed from images hosted in a Docker Trusted Registry. You need to recommend a solution for provisioning and
The correct answer is az ad sp create-for-rbac; az aks create; az role assignment create. The correct sequence begins with 'az ad sp create-for-rbac' to create a custom service principal, which provides the identity AKS will use. Next, 'az aks create' provisions the RBAC-enabled AKS cluster using the service principal credentials (via --service-principal and --client-
Question
Exhibits
Answer Area
Drag items
Correct arrangement
- az ad sp create-for-rbac
- az aks create
- az role assignment create
Explanation
The correct sequence begins with 'az ad sp create-for-rbac' to create a custom service principal, which provides the identity AKS will use. Next, 'az aks create' provisions the RBAC-enabled AKS cluster using the service principal credentials (via --service-principal and --client-secret flags, with --enable-rbac). Finally, 'az role assignment create' grants the service principal the necessary permissions (e.g., AcrPull role) to pull images from the Docker Trusted Registry, completing the secure integration.
Topics
Community Discussion
No community discussion yet for this question.