A DevOps team will create a new container to run on Google Kubernetes Engine. As the application will be internet-facing, they want to minimize the attack surface of the container. What should they…

The correct answer is B. Build small containers using small base images. Small containers usually have a smaller attack surface as compared to containers that use large https://cloud.google.com/blog/products/gcp/kubernetes-best-practices-how-and-why-to-build- small-container-images

Submitted by takeshi77· Apr 18, 2026Managing operations within a cloud solution environment

Question

A DevOps team will create a new container to run on Google Kubernetes Engine. As the application will be internet-facing, they want to minimize the attack surface of the container. What should they do?

Options

AUse Cloud Build to build the container images.
BBuild small containers using small base images.
CDelete non-used versions from Container Registry.
DUse a Continuous Delivery tool to deploy the application.

How the community answered

(29 responses)

A
3% (1)
B
90% (26)
D
7% (2)

Explanation

Small containers usually have a smaller attack surface as compared to containers that use large https://cloud.google.com/blog/products/gcp/kubernetes-best-practices-how-and-why-to-build- small-container-images

Topics

#Container Security#Attack Surface Reduction#Image Hardening#GKE Security

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice