Exam AZ-104 topic 4 question 82 discussion

1) Modify the Network configuration setting "To run an AKS cluster that supports node pools for Windows Server containers, your cluster needs to use a network policy that uses Azure CNI (advanced) network plugin." Ref: https://learn.microsoft.com/en-us/azure/aks/learn/quick-windows-container-deploy-cli 2) AKS-Managed Azure Active Directory Ref: https://learn.microsoft.com/en-us/azure/aks/cluster-container-registry-integration?tabs=azure-cli

1. modify the Network configuration setting 2. AKS-managed Azure AD https://learn.microsoft.com/en-us/azure/aks/learn/quick-windows-container-deploy-cli#create-an-aks-cluster To run an AKS cluster that supports node pools for Windows Server containers, your cluster needs to use a network policy that uses Azure CNI (advanced) network plugin. https://learn.microsoft.com/en-us/azure/aks/cluster-container-registry-integration?tabs=azure-cli The AKS to ACR integration assigns the AcrPull role to the Azure Active Directory (Azure AD) managed identity associated with your AKS cluster.

CORRECT

- increase the number of node Pools - Authentication method

topic 4 question 81 is missing.

(1) Modify the Network configuration setting Tested in lab, if the Network configuration is Kubenet, you will not be able to add a windows node pool, you have to change it from Kubenet to Azure CNI first. Next step, you need to add a new node pool All AKS clusters are created with a default first node pool, which is Linux-based. This node pool contains system services that are needed for the cluster to function. ...The first Linux-based node pool can't be deleted unless the AKS cluster itself is deleted. https://learn.microsoft.com/en-us/azure/aks/windows-faq?tabs=azure-cli

Increase the number of node pools (First node is linux only) AKS-managed Azure Active Directory (Needs the ACR-Pull role)

https://learn.microsoft.com/en-us/azure/aks/learn/quick-windows-container-deploy-cli "To run an AKS cluster that supports node pools for Windows Server containers, your cluster needs to use a network policy that uses Azure CNI (advanced) network plugin." Above diagram uses Kubenet Network configuration - That needs to be modified to Azure CNI. Hence firt box answer is "modify the network configuration setting" To use Windows Server node pools, you must use Azure CNI. The use of kubenet as the network model is not available for Windows Server containers. Also, Windows Containers need their own Node pool as default AKS configuration is for Linux containers. There is a possibility of "increase the number of node pools" as well - as current node pool count is 1. However, first step would be to fix Network configuration.

By default, an AKS cluster is created with a node pool that can run Linux containers. Use az aks nodepool add command to add an additional node pool that can run Windows Server containers alongside the Linux node pool. https://learn.microsoft.com/en-us/azure/aks/learn/quick-windows-container-deploy-cli