StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · SaaS PaaS IaaS containers and AI services

Practice question 334 of 498 · hard

An AKS API server is private, but an application service exposes sensitive workloads publicly. What is the correct assessment?

Choose the single best answer.

  1. A.A private API server guarantees every application is private
  2. B.Kubernetes RBAC authorizes every external application user
  3. C.API privacy automatically provides WAF inspection to every service
  4. D.Private API access does not establish workload ingress protection; review service exposure and authorization
Show the answer and explanation

✓ Correct answer

  • Private API access does not establish workload ingress protection; review service exposure and authorization

Control-plane privacy and workload ingress are separate boundaries. Private API access does not make every Service private or provide WAF inspection. Kubernetes administrative RBAC does not replace application authorization for external users.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.