A patch for a vulnerability has been released, and a DevOps team needs to update their running containers in Google Kubernetes Engine (GKE). How should the DevOps team accomplish this?

The correct answer is C. Update the application code or apply a patch, build a new image, and redeploy it. https://cloud.google.com/containers/security Containers are meant to be immutable, so you deploy a new image in order to make changes. You can simplify patch management by rebuilding your images regularly, so the patch is picked up the next time a container is deployed. Get the…

Submitted by fatima_kr· Apr 18, 2026Managing operations within a cloud solution environment

Question

A patch for a vulnerability has been released, and a DevOps team needs to update their running containers in Google Kubernetes Engine (GKE). How should the DevOps team accomplish this?

Options

AUse Puppet or Chef to push out the patch to the running container.
BVerify that auto upgrade is enabled; if so, Google will upgrade the nodes in a GKE cluster.
CUpdate the application code or apply a patch, build a new image, and redeploy it.
DConfigure containers to automatically upgrade when the base image is available in Container

How the community answered

(23 responses)

A
17% (4)
B
4% (1)
C
74% (17)
D
4% (1)

Explanation

https://cloud.google.com/containers/security Containers are meant to be immutable, so you deploy a new image in order to make changes. You can simplify patch management by rebuilding your images regularly, so the patch is picked up the next time a container is deployed. Get the full picture of your environment with regular image security reviews.

Topics

#GKE Operations#Container Image Management#Vulnerability Patching#Immutable Infrastructure

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice