Google Cloud Professional Cloud DevOps Engineer PCDOE — Topic 1 Question 176

Question

You receive a Cloud Monitoring alert indicating potential malicious activity on a node in your Google Kubernetes Engine (GKE) cluster. The alert suggests a possible compromised container running on that node. You need to isolate this node to prevent further compromise while investigating the issue. You also want to minimize disruption to applications running on the cluster. What should you do?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Cordon the node to prevent new Pods from being scheduled, the drain the node to safely remove existing Pods and reschedule them to other nodes.

Google Cloud Professional Cloud DevOps Engineer PCDOE — Question 176