AZ-104 Certification Practice Question #41

Question

You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant named contoso.com and an Azure Kubernetes Service (AKS) cluster named AKS1.
An administrator reports that she is unable to grant access to AKS1 to the users in contoso.com.
You need to ensure that access to AKS1 can be granted to the contoso.com users.
What should you do first?

Accepted Answer

In the context of the AZ-104 exam, this question tests the integration of Azure Active Directory (Microsoft Entra ID) with Azure Kubernetes Service (AKS). To allow users in the `contoso.com` tenant to authenticate against the AKS cluster using their Azure AD credentials, Azure AD needs to serve as the identity provider via OpenID Connect (which is built on top of OAuth 2.0). Historically, setting up this integration required creating the Azure AD server and client application registrations to establish the OAuth 2.0 authorization endpoint. Although managed Azure AD integration in modern AKS handles this automatically and can be updated via CLI, option B remains the officially recognized and correct answer for this legacy question in the exam database.

More AZ-104 practice questions