PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #81
PROFESSIONAL-CLOUD-SECURITY-ENGINEER Question #81: Real Exam Question with Answer & Explanation
The correct answer is B: Build small containers using small base images.. Small containers usually have a smaller attack surface as compared to containers that use large https://cloud.google.com/blog/products/gcp/kubernetes-best-practices-how-and-why-to-build- small-container-images
Question
A DevOps team will create a new container to run on Google Kubernetes Engine. As the application will be internet-facing, they want to minimize the attack surface of the container. What should they do?
Options
- AUse Cloud Build to build the container images.
- BBuild small containers using small base images.
- CDelete non-used versions from Container Registry.
- DUse a Continuous Delivery tool to deploy the application.
Explanation
Small containers usually have a smaller attack surface as compared to containers that use large https://cloud.google.com/blog/products/gcp/kubernetes-best-practices-how-and-why-to-build- small-container-images
Topics
Community Discussion
No community discussion yet for this question.