Topic 1 Question 42
A DevOps team will create a new container to run on Google Kubernetes Engine. As the application will be internet-facing, they want to minimize the attack surface of the container. What should they do?
Use Cloud Build to build the container images.
Build small containers using small base images.
Delete non-used versions from Container Registry.
Use a Continuous Delivery tool to deploy the application.
ユーザの投票
コメント(17)
Ans is B
Small containers usually have a smaller attack surface as compared to containers that use large base images.
👍 27xhova2020/04/03should be A, because cloud build has a feature for vulnerability scan
👍 3[Removed]2020/11/01Answer is B : at the cost of more space and a slightly higher surface area for attacks.
👍 3soukumar3692020/12/12
シャッフルモード