Exam AZ-305 topic 4 question 113 discussion

Mutual TLS (mTLS) authentication is natively supported by Azure API Management and can be enabled in Kubernetes by installing an Ingress Controller. This approach simplifies the microservices as the authentication will be performed in the Ingress Controller. This solution also meets the requirements of implementing mTLS authentication between APIM1 and AKS1, minimizing development effort, and minimizing costs. Please note that while deploying an ingress controller to AKS1, you should ensure that it supports mTLS. Examples of enterprise-level ingress controllers that support mTLS include NGINX and AGIC1. https://learn.microsoft.com/en-us/azure/api-management/api-management-kubernetes

D is correct

mTLS between APIM1 and AKS1 while minimizing development effort and costs-->Deploy an ingress controller to AKS1. This approach ensures secure communication between APIM1 and AKS1 while meeting the specified requirements

Given answer D is correct , as note is that Ingress Controller is part of App GWY L7 Load Balancer The Application Gateway Ingress Controller (AGIC) is a Kubernetes application, which makes it possible for Azure Kubernetes Service (AKS) customers to leverage Azure's native Application Gateway L7 load-balancer to expose cloud software to the Internet. AGIC monitors the Kubernetes cluster it's hosted on and continuously updates an Application Gateway, so that selected services are exposed to the Internet. https://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-overview

Ingress controller is correct answer. There is picture describing the architecture (API Management > Ingress Controller > AKS cluster): https://learn.microsoft.com/en-us/azure/architecture/solution-ideas/articles/mutual-tls-deploy-aks-api-management

it was a exam Question

D https://learn.microsoft.com/en-us/azure/api-management/api-management-kubernetes

D is correct. https://learn.microsoft.com/en-us/azure/api-management/api-management-kubernetes#option-2-install-an-ingress-controller