Microsoft Cybersecurity Architect — Question 23

You have an Azure Kubernetes Service (AKS) cluster that hosts Linux nodes.

You need to recommend a solution to ensure that deployed worker nodes have the latest kernel updates. The solution must minimize administrative effort.

What should you recommend?

Answer options

• A. The nodes must restart after the updates are applied.
• B. The updates must first be applied to the image used to provision the nodes.
• C. The AKS cluster version must be upgraded.

Correct answer: B

Explanation

The correct answer is B because applying updates to the image used for provisioning ensures that all new nodes will have the latest kernel updates when they are created. Option A is incorrect since merely restarting nodes after updates does not guarantee they will have the latest updates unless the image itself is updated. Option C, upgrading the AKS cluster version, does not specifically address kernel updates for the existing nodes.