You receive a Cloud Monitoring alert indicating potential malicious activity on a node in your Google Kubernetes Engine (GKE) cluster. The alert suggests a possible compromised container running on…

Question

Options

• ATaint the suspicious node to prevent Pods that have interacted with it from being scheduled on
• BScale down the deployment associated with the compromised container to zero other nodes
• CRestart the node to disrupt the malicious activity, and force all Pods to be restructured on other
• DCordon the node to prevent new Pods from being scheduled, the drain the node to safely remove

• A
  4% (1)
• B
  12% (3)
• C
  4% (1)
• D
  80% (20)

Explanation

Cordon prevents new workloads from being scheduled on the node, ensuring that no new containers start on the potentially compromised node. Draining safely removes existing workloads while allowing them to be rescheduled on healthy nodes, minimizing disruption. This method helps isolate the node while maintaining cluster stability and availability.

No community discussion yet for this question.