An AKS cluster needs outbound internet traffic routed through a central Azure Firewall. What is required?
- A Configure NSG on the node subnet
- B Use a User-Defined Route (UDR) to route 0.0.0.0/0 to the firewall private IP (correct answer)
- C Set outboundType to loadBalancer
- D Enable public IP on each node
Shortcut: 0/0 to the Azure Firewall private IP forces all AKS egress through the firewall.
Setting outboundType=userDefinedRouting with a UDR routing 0.0.0.0/0 to the Azure Firewall private IP forces all AKS egress through the firewall.