[&] John needs to develop container-based applications for Kubernetes. You need to provide John with access to an AKS cluster without accessing your production pods. What is the best way to do this? - Provision a new AKS cluster and grant John the appropriate cluster role - Create a new namespace on the production AKS. Grant John the appropriate role on the namespace -- Correct - Provision a new AKS cluster and grant John the appropriate role - Grant John the appropriate cluster role in the production AKS