nerdexam
Microsoft

AZ-500 · Question #652

Drag and Drop Question You need to deploy an Azure Kubernetes Service (AKS) cluster that will contain an initial node pool named Pool1 for general workloads and an additional node pool named Pool2…

The correct answer is An Azure Container Networking Interface (CNI) Overlay subnet; An Azure Container Networking Interface (CNI) subnet. Pool1 (general workloads) uses an Azure CNI Overlay subnet because it supports future node pools efficiently by not consuming pod IP addresses directly from the VNet subnet, reducing IP exhaustion concerns while minimizing administrative effort. Pool2 (sensitive workloads) uses…

Submitted by emma.c· Mar 6, 2026Design and Implement Azure Kubernetes Service (AKS) Networking - Configure network models including Azure CNI, Azure CNI Overlay, and kubenet for AKS clusters and node pools.

Question

Drag and Drop Question You need to deploy an Azure Kubernetes Service (AKS) cluster that will contain an initial node pool named Pool1 for general workloads and an additional node pool named Pool2 for sensitive workloads. Each node pool must be assigned to a subnet, and pod IP addresses will be allocated directly from that subnet. The solution must support future node pools and minimize administrative effort. Which type of subnet should you assign for each node pool? To answer, drag the appropriate subnet types to the correct node pools. Each subnet type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Answer: Exam Questions, Study Guides, Practice Tests. Lead the way to help you pass any IT Certification exams, 100% Pass Guaranteed or Full Refund. Especially Cisco, Microsoft, CompTIA, Citrix, EMC, HP, Oracle, VMware, Juniper, Check Point, LPI, Nortel, EXIN and so on. Our Slogan: First Test, First Pass. Help you to pass any IT Certification exams at the first try. You can reach us at any of the email addresses listed below. Any problems about IT certification or our products, you could rely upon us, we will give you satisfactory answers in 24 hours.

Exhibits

AZ-500 question #652 exhibit 1
AZ-500 question #652 exhibit 2

Answer Area

Drag items

An Azure Container Networking Interface (CNI) subnetAn Azure Container Networking Interface (CNI) Overlay subnetA delegated subnetA kubenet subnet

Correct arrangement

  • An Azure Container Networking Interface (CNI) Overlay subnet
  • An Azure Container Networking Interface (CNI) subnet

Explanation

Pool1 (general workloads) uses an Azure CNI Overlay subnet because it supports future node pools efficiently by not consuming pod IP addresses directly from the VNet subnet, reducing IP exhaustion concerns while minimizing administrative effort. Pool2 (sensitive workloads) uses a standard Azure CNI subnet so that pod IP addresses are allocated directly from the subnet - this allows network policies, firewall rules, and security controls to be applied at the pod level using real VNet IP addresses, which is essential for sensitive workloads requiring strict network isolation.

Topics

#Azure Kubernetes Service#AKS Networking#Azure CNI#Node Pools

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice