Q7 AKS Domain 1 · 20–25% of exam

Which AKS security feature uses confidential VM SKUs to protect VM memory with hardware-based TEE (Trusted Execution Environment)?

  1. A Workload Identity
  2. B Confidential computing node pools (DCsv3) (correct answer)
  3. C Azure Defender for Containers
  4. D Secure Boot with vTPM

Shortcut: AKS confidential computing node pools use DCsv3 Intel SGX VMs with hardware-encrypted memory (Trusted Execution Environment) for sensitive workloads.