AI-200 Containerized AI Workloads Practice Question
Your enterprise requires that all container images deployed to Azure Kubernetes Service (AKS) must originate from approved corporate Azure Container Registries (ACRs). How can you enforce this restriction cluster-wide?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure Azure Policy for Kubernetes with the built-in initiative to restrict container registries
Azure Policy for Kubernetes uses Gatekeeper v3 to audit or enforce cluster behaviors, such as restricting image registries.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Configure standard Kubernetes Network Policies in the kube-system namespace
Why it's wrong here
Network policies control network packet flows between pods, not container image sources.
- ✓
Configure Azure Policy for Kubernetes with the built-in initiative to restrict container registries
Why this is correct
Azure Policy for Kubernetes enforces admission control rules that block deployment of images from unapproved registries.
- ✗
Set up ACR webhook notifications to trigger Azure Functions that delete unauthorized pods
Why it's wrong here
Webhooks are reactive and do not prevent the initial unauthorized deployment like admission controllers do.
- ✗
Modify the kubelet configuration file on every cluster node manually
Why it's wrong here
Manual node configuration does not scale and is unsupported on managed AKS control planes.
About these practice questions
Courseiva writes every AI-200 question from scratch — 503 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Microsoft exam blueprint
This AI-200 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI-200 exam.