AZ-400 Container and Microservices Deployment 5

Question 1

You need to implement GitOps for AKS deployments where the cluster state is continuously reconciled with a Git repository. Which tool is purpose-built for this pattern?

Accepted Answer

Flux CD or Argo CD deployed in the AKS cluster

Answer

Flux CD and Argo CD are GitOps operators that run inside Kubernetes and continuously reconcile cluster state with the desired state declared in a Git repository.

Question 2

A container in AKS keeps being OOMKilled. What is the correct resource configuration change to prevent this?

Accepted Answer

Increase the memory limit in the container's resources.limits.memory field

Answer

OOMKilled occurs when a container exceeds its memory limit; increasing resources.limits.memory gives the container more memory before the kernel terminates it.

Question 3

In Azure Container Registry (ACR), which feature automatically removes untagged manifests and old image tags based on configurable retention policies?

Accepted Answer

ACR retention policies and automated purge tasks

Answer

ACR retention policies and scheduled purge tasks (az acr task create with a purge command) automatically clean up untagged manifests and old tags to manage registry storage.

Question 4

When deploying microservices with Azure Container Apps, what is the purpose of the 'ingress' configuration with 'external: false'?

Accepted Answer

The container app is only reachable from other apps within the same Container Apps Environment

Answer

Setting external: false on a Container App's ingress restricts its HTTP endpoint to internal traffic within the Container Apps Environment, preventing public internet access.

Question 5

You want Azure Pipelines to deploy to AKS only after a manual approval from the security team. Where is this approval gate configured?

Accepted Answer

On the Azure DevOps Environment as a pre-deployment approval check

Answer

Pre-deployment approvals are configured on Azure DevOps Environments; when a pipeline targets that environment, it pauses and waits for designated approvers before proceeding.

AZ-400 Practice Test

AZ-400 Practice Test

AZ-400 Container and Microservices Deployment 5