Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: DevOps Engineer Expert · Microsoft
Interactive Drag & Drop Matching
Drag each configuration to its target, or tap an option then tap a target slot.
Hotspot Solution:
ChatGPT answer: 1) an application registration in contoso.com: First, you need to create an application registration (also known as a service principal) in the Azure Active Directory tenant contoso.com. This application registration represents the identity that will be used to authenticate and authorize access to the AKS cluster. 2) a cluster: Once you have the application registration in place, you can provision the AKS cluster in Subscription1. During the creation process, you will associate the cluster with the contoso.com Azure Active Directory tenant. 3) an RBAC binding: After the AKS cluster is provisioned, you need to set the permissions and access controls for the cluster using RBAC (Role-Based Access Control). RBAC allows you to define roles and assign them to specific users, groups, or service principals. In this step, you will create an RBAC binding that references the identities in contoso.com and grant them the appropriate roles and permissions for the AKS cluster.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
The given answer is correct
Agree with suggested answer --Create Cluster --Create Managed identity --Assigned required RBAC
when use system-assigned managed identity, should be only two steps 1. a cluster 2. an RBAC binding Managed identities are the recommended way to authenticate with other resources in Azure, and is the default authentication method for your AKS cluster. https://learn.microsoft.com/en-us/azure/aks/kubernetes-service-principal?tabs=azure-cli A system-assigned managed identity is automatically created when you create an AKS cluster. https://learn.microsoft.com/en-us/azure/aks/use-managed-identity ------------------------------------------------------------------------------------------------------------------------------------------------ when use service principle, should be three steps 1. a cluster 2. an application registration in contoso.com 3. an RBAC binding https://learn.microsoft.com/en-us/azure/aks/kubernetes-service-principal?tabs=azure-cli