Google
PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #358
Your organization is planning to deploy a large number of Google Kubernetes Engine (GKE) clusters to run business applications in different folders and projects. You must ensure that all GKE nodes…
The correct answer is B. Create a custom organization policy constraint resource.management.autoUpgrade ==. Enforcing a custom org policy that requires resource.management.autoUpgrade == true ensures every GKE node pool is created with node auto-upgrade enabled, so nodes are kept on the latest release automatically without manual intervention.
Submitted by emma.c· Apr 18, 2026Ensuring compliance
Question
Your organization is planning to deploy a large number of Google Kubernetes Engine (GKE) clusters to run business applications in different folders and projects. You must ensure that all GKE nodes always run the latest release to minimize vulnerability risk and administrative effort. What should you do?
Options
- AAfter creating clusters, use the Google Cloud console gcloud container node-pools
- BCreate a custom organization policy constraint resource.management.autoUpgrade ==
- CCreate a new node pool with the newer version for each cluster. Migrate the workload. Eliminate
- DManually run the Google Cloud console gcloud container clusters upgrade
How the community answered
(27 responses)- A4% (1)
- B78% (21)
- C4% (1)
- D15% (4)
Explanation
Enforcing a custom org policy that requires resource.management.autoUpgrade == true ensures every GKE node pool is created with node auto-upgrade enabled, so nodes are kept on the latest release automatically without manual intervention.
Topics
#GKE node auto-upgrade#Organization Policy#Vulnerability management#Cloud Governance
Community Discussion
No community discussion yet for this question.