AI-103 Plan And Manage AN Azure AI Solution Practice Question
You are deploying an Azure AI Speech container on an Azure Kubernetes Service (AKS) cluster. Your security policy dictates that pod-to-pod communication within the cluster must be encrypted in transit using mTLS, and egress traffic to Azure must flow through a strict outbound firewall. Which Kubernetes feature should you implement?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Kubernetes Network Policies combined with a service mesh for mTLS
Kubernetes network policies control traffic flow between pods, while a service mesh (like Istio or Linkerd) provides mTLS encryption in transit.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Azure Container Registry vulnerability scanning
Why it's wrong here
ACR vulnerability scanning checks container images for known CVEs before deployment, not runtime mTLS encryption.
- ✓
Kubernetes Network Policies combined with a service mesh for mTLS
Why this is correct
Network policies govern IP-level pod isolation, while a service mesh enforces mTLS encryption for pod-to-pod communication.
- ✗
Azure Bastion deployed inside the AKS worker node subnet
Why it's wrong here
Azure Bastion is used for management access to VMs, not container network security policies.
- ✗
AKS cluster auto-scaler configuration
Why it's wrong here
Cluster auto-scaler adjusts node pool sizes based on resource demand, unrelated to network encryption.
About these practice questions
One of 510 original AI-103 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Microsoft exam blueprint
This AI-103 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI-103 exam.