You Are Building a Product on Top of Google Kubernetes

question 47

Multiple Choice

You are building a product on top of Google Kubernetes Engine (GKE) . You have a single GKE cluster. For each of your customers, a Pod is running in that cluster, and your customers can run arbitrary code inside their Pod. You want to maximize the isolation between your customers' Pods. What should you do?

• A) Use Binary Authorization and whitelist only the container images used by your customers' Pods.
• B) Use the Container Analysis API to detect vulnerabilities in the containers used by your customers' Pods.
• C) Create a GKE node pool with a sandbox type configured to gvisor . Add the parameter runtimeClassName: gviso r to the specification of your customers' Pods. Create a GKE node pool with a sandbox type configured to gvisor . Add the parameter runtimeClassName: gviso r to the specification of your customers' Pods.
• D) Use the cos_containerd image for your GKE nodes. Add a nodeSelector with the value cloud.google.com/gke-os-distribution: cos_containerd to the specification of your customers' Pods. Use the cos_containerd image for your GKE nodes. Add a nodeSelector with the value cloud.google.com/gke-os-distribution: cos_containerd to the specification of your customers' Pods.

---

Definitions:

Limited Partner

A type of investor in a partnership who has limited liability to the extent of their investment and typically does not participate in daily business management.

Statutory Provisions

Laws or regulations enacted by the legislative body that must be adhered to.

Liability

The condition of having legal accountability, especially regarding debts or legal duties.

Limited Partnership

A type of partnership composed of one or more general partners who manage the business and are personally liable, and one or more limited partners who contribute capital and have limited liability.