Microsoft Azure Security Technologies (AZ-500)

When preparing to deploy Docker containers to a virtual machine, which step is unnecessary if access to Azure resources is already configured?

1. Installing Docker

2. Installing CNI plug-in

3. Configuring the service endpoint

4. Creating an AKS Ingress controller

The correct answer is: Creating an AKS Ingress controller

When deploying Docker containers to a virtual machine in Azure, creating an AKS Ingress controller is unnecessary if access to Azure resources is already configured. An Ingress controller is specifically designed for managing access to services within an Azure Kubernetes Service (AKS) environment and is used primarily when you're deploying applications in a Kubernetes cluster. In a scenario where you are simply deploying Docker containers directly to a virtual machine, this step is not relevant. The other steps such as installing Docker, installing a CNI (Container Networking Interface) plug-in, and configuring the service endpoint are fundamental prerequisites for ensuring that Docker can run containers effectively and appropriately connect to Azure resources, regardless of whether you are using a Kubernetes setup or not. Thus, while configuring access to resources is critical, deploying containers on a standalone virtual machine does not necessitate the use of an Ingress controller, making that option the correct choice in this context.