SC-100 · Question #255
You have an Azure subscription. You plan to deploy Azure Kubernetes Service (AKS) clusters that will be used to host web services. You need to recommend an ingress controller solution that will…
The correct answer is B. Azure Application Gateway. Azure Application Gateway with the Application Gateway Ingress Controller (AGIC) add-on is the purpose-built solution for protecting web services hosted on AKS. It operates at Layer 7 (HTTP/HTTPS) and includes an integrated Web Application Firewall (WAF) based on OWASP Core…
Question
You have an Azure subscription. You plan to deploy Azure Kubernetes Service (AKS) clusters that will be used to host web services. You need to recommend an ingress controller solution that will protect the hosted web services. What should you include in the recommendation?
Options
- AAzure Load Balancer
- BAzure Application Gateway
- CAzure Front Door
- DAzure Firewall
How the community answered
(27 responses)- A7% (2)
- B74% (20)
- C15% (4)
- D4% (1)
Explanation
Azure Application Gateway with the Application Gateway Ingress Controller (AGIC) add-on is the purpose-built solution for protecting web services hosted on AKS. It operates at Layer 7 (HTTP/HTTPS) and includes an integrated Web Application Firewall (WAF) based on OWASP Core Rule Sets, which actively inspects and filters malicious web traffic before it reaches the pods. AGIC runs inside AKS and automatically configures Application Gateway rules based on Kubernetes Ingress resources, making it a native ingress controller with protection. Azure Load Balancer (A) operates at Layer 4 and has no WAF or application-level inspection. Azure Front Door (C) is a global CDN/load balancer - it can provide WAF but is not an AKS ingress controller and adds unnecessary global routing complexity for this scenario. Azure Firewall (D) provides network-level and FQDN filtering but is not an ingress controller and lacks HTTP-specific WAF capabilities.
Topics
Community Discussion
No community discussion yet for this question.