SC-100 Certification Practice Question #24

Question

You have an Azure Kubernetes Service (AKS) cluster that hosts Linux nodes.

You need to recommend a solution to ensure that deployed worker nodes have the latest kernel updates. The solution must minimize administrative effort.

What should you recommend?

Accepted Answer

In AKS, the Linux kernel and OS security patches are delivered through the **node image**: Microsoft rebuilds the node image roughly weekly with the latest kernel/OS patches, and applying a node image upgrade cordons, drains, and replaces existing nodes so newly provisioned nodes carry the latest kernel. MS Learn distinguishes the "node image version" (OS/kernel/runtime patches) from the "cluster Kubernetes version," confirming that getting the latest kernel onto deployed nodes is fundamentally about the image used to provision them — matching option B. Option A (reboot) is only the finalizing step for an in-place update and not the recommended low-effort solution, and option C upgrades the Kubernetes version rather than directly addressing kernel patching. Confidence is held at 80% because there is a genuine community split toward C (a cluster upgrade does pull a new node image as a side effect), but both the Suggested Answer and the dominant vote, backed by MS Learn's node-image guidance, make B the better answer.

More SC-100 practice questions