SC-100: Microsoft Cybersecurity ArchitectDemo

By Microsoft · Question Mode

QuestionQ339

Design security solutions for infrastructure

You have an on-premises datacenter and an Azure Kubernetes Service (AKS) cluster called AKS1.

You need to limit Internet access to AKS1’s public endpoint. The solution must ensure that AKS1 is accessible only from the public IP addresses associated with the on-premises datacenter.

What should you use?

  • A a private endpoint
  • B a network security group (NSG)
  • C a service endpoint
  • D an authorized IP range
Explanation

AKS API server authorized IP ranges provide an allowlist of public IP addresses or CIDR ranges that can reach the public control-plane endpoint. Configuring the on-premises datacenter’s public IP addresses restricts access to those addresses.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!