Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 63

Question

For compliance reasons, an organization needs to ensure that in-scope PCI Kubernetes Pods reside on `in-scope` Nodes only. These Nodes can only contain the `in-scope` Pods. How should the organization achieve this objective?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Place a taint on the Nodes with the label inscope: true and effect NoSchedule and a toleration to match in the Pod configuration.

Google Cloud Professional Cloud Security Engineer PCSE — Question 63