AZ-500 · Question #652
Drag and Drop Question You need to deploy an Azure Kubernetes Service (AKS) cluster that will contain an initial node pool named Pool1 for general workloads and an additional node pool named Pool2…
The correct answer is An Azure Container Networking Interface (CNI) Overlay subnet; An Azure Container Networking Interface (CNI) subnet. Pool1 (general workloads) uses an Azure CNI Overlay subnet because it supports future node pools efficiently by not consuming pod IP addresses directly from the VNet subnet, reducing IP exhaustion concerns while minimizing administrative effort. Pool2 (sensitive workloads) uses…
Question
Exhibits
Answer Area
Drag items
Correct arrangement
- An Azure Container Networking Interface (CNI) Overlay subnet
- An Azure Container Networking Interface (CNI) subnet
Explanation
Pool1 (general workloads) uses an Azure CNI Overlay subnet because it supports future node pools efficiently by not consuming pod IP addresses directly from the VNet subnet, reducing IP exhaustion concerns while minimizing administrative effort. Pool2 (sensitive workloads) uses a standard Azure CNI subnet so that pod IP addresses are allocated directly from the subnet - this allows network policies, firewall rules, and security controls to be applied at the pod level using real VNet IP addresses, which is essential for sensitive workloads requiring strict network isolation.
Topics
Community Discussion
No community discussion yet for this question.

