nerdexam
Microsoft

AZ-500 · Question #651

You are testing an Azure Kubernetes Service (AKS) cluster. The cluster is configured as shown in the exhibit. (Click the Exhibit tab.) You plan to deploy the cluster to production. You disable HTTP…

The correct answer is D. Create an AKS Ingress controller. When HTTP application routing is disabled in an Azure Kubernetes Service (AKS) cluster, you must implement a custom Ingress Controller to achieve application routing, reverse proxying, and TLS termination using a single IP address…

Submitted by olafpl· Mar 6, 2026Secure networking

Question

You are testing an Azure Kubernetes Service (AKS) cluster. The cluster is configured as shown in the exhibit. (Click the Exhibit tab.) You plan to deploy the cluster to production. You disable HTTP application routing. You need to implement application routing that will provide reverse proxy and TLS termination for AKS services by using a single IP address. What should you do?

Exhibits

AZ-500 question #651 exhibit 1
AZ-500 question #651 exhibit 2

Options

  • ACreate a Premium Azure Front Door.
  • BCreate an Azure Standard Load Balancer.
  • CInstall the container network interface (CNI) plug-in.
  • DCreate an AKS Ingress controller.

How the community answered

(22 responses)
  • A
    5% (1)
  • B
    5% (1)
  • C
    14% (3)
  • D
    77% (17)

Explanation

When HTTP application routing is disabled in an Azure Kubernetes Service (AKS) cluster, you must implement a custom Ingress Controller to achieve application routing, reverse proxying, and TLS termination using a single IP address. https://learn.microsoft.com/en-us/troubleshoot/azure/azure-kubernetes/load-bal-ingress-c/create- unmanaged-ingress-controller

Topics

#AKS ingress controller#TLS termination#reverse proxy#Kubernetes networking

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice