Q22 AKS Domain 1 · 20–25% of exam Priority · Real Exam

What is the practical consequence of enabling Azure AD integration with Azure RBAC for Kubernetes authorisation?

  1. A Kubernetes RBAC objects are ignored entirely
  2. B Access is granted through Azure role assignments instead of managing RoleBindings in-cluster (correct answer)
  3. C Only the admin kubeconfig can be used
  4. D Pods gain automatic Key Vault access

Shortcut: With Azure RBAC for Kubernetes, authorisation decisions are made from Azure role assignments scoped to the cluster or namespace, centralising access control in Azure AD rather than in-cluster manifests.