Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: Cybersecurity Architect Expert · Microsoft
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Why B is correct: To ensure that all current and newly provisioned scale-up worker nodes reliably run on the latest security and kernel updates with the absolute minimum administrative effort, the node image itself must be updated. AKS simplifies this via Node Image Upgrades or by configuring automatic Node OS Auto-Upgrade channels. This ensures new nodes are born patched without you having to manually manage or configuration-bash individual hosts. https://learn.microsoft.com/en-us/azure/aks/upgrade-cluster-components
C. The AKS cluster version must be upgraded In AKS, Linux node kernel updates come only through AKS node image updates. AKS updates node images when you upgrade the AKS cluster version. This is the lowest‑effort, Microsoft‑recommended way to ensure nodes get the latest kernel and security patches.
The update sequence between AKS cluster version, node image, and worker nodes, based on Microsoft’s AKS upgrade practices 1. AKS Cluster Version 2. Node Image Version 3. Worker Nodes