Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Question 42 of 107
Free Preview · 107 of 355 · questions 1–107 of 355 are free. Sign up free to sync your progress across devices.
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Building small containers using minimal and well-maintained base images directly reduces the attack surface and improves the security posture of your containers when they are deployed on GKE.
the correct answer is having as few tools in your image as possible, Source: Remove unnecessary tools https://cloud.google.com/architecture/best-practices-for-building-containers?hl=en I guess it can be achieved by option "B" building a small container from a small source image.
A. Use Cloud Build to build the container images. Will give you the tools to build an image but not ensure any risk reduction B. Build small containers using small base images. Images with a smaller footprint, stripped of all binaries/libraries/functions that are not used will make it harder for an attacker to find leverage to move laterally or vertically, hence >>reducing the attack/risk surface<< for the image. C. Delete non-used versions from Container Registry. Non-used images are not running live and hence are not exploitable. Removing non-used images from the registry will not reduce the attack surface of the running application. D. Use a Continuous Delivery tool to deploy the application. Same as A.