After disabling HTTP application routing in an AKS cluster, you need a replacement that provides reverse proxy and TLS termination for AKS services using a single IP address. Which of the following should you create?

The correct answer is "No adjustment required" because Azure Kubernetes Service (AKS) ingress controllers, such as NGINX Ingress Controller or Azure Application Gateway Ingress Controller, inherently provide reverse proxy and TLS termination capabilities for services within the cluster. When HTTP application routing is disabled, these ingress controllers continue to function, allowing you to expose services via a single IP address and manage TLS certificates. A network security group (NSG) filters network traffic and does not provide reverse proxy or TLS termination. An application security group (ASG) groups virtual machines for security policy enforcement, also not offering the required functionality. An Azure Basic Load Balancer distributes traffic but lacks the advanced features of an ingress controller, such as host-based routing and TLS termination at the application layer.