Deploy Azure Container Instances for Secure Communication | AZ-500 Exam Preparation

Ensure Application Container and Validation Container Deployment | AZ-500 Exam Guide

Question

You plan to deploy Azure container instances.

You have a containerized application that validates credit cards. The application is comprised of two containers: an application container and a validation container.

The application container is monitored by the validation container. The validation container performs security checks by making requests to the application container and waiting for responses after every transaction.

You need to ensure that the application container and the validation container are scheduled to be deployed together. The containers must communicate to each other only on ports that are not externally exposed.

What should you include in the deployment?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

D

Azure Container Instances supports the deployment of multiple containers onto a single host using a container group. A container group is useful when building an application sidecar for logging, monitoring, or any other configuration where a service needs a second attached process.

https://docs.microsoft.com/en-us/azure/container-instances/container-instances-container-groups

To deploy Azure container instances and ensure that the application container and validation container communicate only on internal ports, you should use container groups. The correct answer is D.

Container groups in Azure are a way to manage a set of containers that need to be deployed and run together. A container group can contain one or more containers, and they can be scheduled to run together on the same host. This feature allows you to deploy complex applications that require multiple containers to run as a single entity.

In this scenario, the container group should contain both the application container and the validation container. When creating the container group, you can specify which ports should be exposed externally and which should only be used for internal communication between the containers. You can configure the container group to only allow communication between containers on the internal ports by setting up a virtual network for the container group.

Application security groups are used to apply network security policies to a set of virtual machines that have common characteristics. Network security groups (NSGs) are used to control inbound and outbound traffic to Azure resources. Management groups are used to organize and manage resources at scale.

Therefore, the correct answer is D. Container groups provide a way to ensure that the application container and the validation container are scheduled to be deployed together and communicate only on internal ports.