Question 243 of 296 from exam AZ-400: Designing and Implementing Microsoft DevOps Solutions

Question 243 of 296 from exam AZ-400: Designing and Implementing Microsoft DevOps Solutions

Question

HOTSPOT -

You need to create deployment files for an Azure Kubernetes Service (AKS) cluster. The deployments must meet the provisioning storage requirements shown in the following table.

Which resource type should you use for each deployment? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

Explanations

Deployment 1: provisioner: kubernetes.io/azure-file

You can use Azure Files to connect using the Server Message Block (SMB) protocol.

Deployment 2: provisioner: kubernetes.io/azure-disk

Deployment 3: driver: secrets-store.csi.k8s.io

Azure Key vault provider for Secrets Store CSI driver allows you to access secrets stored in an Azure Key vault instance. The Secrets Store CSI driver secrets- store.csi.k8s.io allows the cluster to mount secrets stored in Azure Key vault into the pods as a volume.

Incorrect Answers:

blobfuse-flexvolume: This driver allows Kubernetes to access virtual filesystem backed by the Azure Blob storage.

Note: azurekeyvault-flexvolume has been deprecated and replaced by the Azure Key Vault Provider for Secret Store CSI Driver.

https://docs.microsoft.com/bs-cyrl-ba/azure/aks/azure-files-dynamic-pv https://docs.microsoft.com/en-us/azure/aks/azure-disks-dynamic-pv https://docs.microsoft.com/en-us/samples/azure-samples/secrets-store-csi-with-aks-akv/secrets-store-csi-with-aks-akv/