Containers and Cloud Storage GCLD Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is a primary benefit of using containers for deploying cloud applications?

   • AContainers provide consistent behavior across different environments because they package the application and its dependencies.
   • BContainers include a full operating system, which simplifies patching of the guest OS.
   • CContainers eliminate the need for any security controls because they are inherently isolated from the host.
   • DContainers are always more cost-effective than VMs because they do not consume any host resources.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A company runs a containerized application on a Kubernetes cluster. The application is stateless and can tolerate pod restarts. The company wants to ensure that if a node fails, the pods are rescheduled to another node, and that the application can handle a sudden increase in traffic. Which configuration is most appropriate?

   • AUse a DaemonSet to run one pod on each node.
   • BUse a Deployment with multiple replicas and a HorizontalPodAutoscaler.
   • CUse a single pod with a liveness probe.
   • DUse a StatefulSet with persistent volumes.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A startup is deploying a microservices application on a managed Kubernetes cluster. Each microservice is packaged as a container image and needs to be updated independently. The team wants to minimize the overhead of managing the underlying virtual machines while maintaining the ability to scale individual microservices. Which approach best meets these requirements?

   • AUse a managed Kubernetes service with each microservice defined as a separate deployment and service.
   • BRun each microservice in its own VM and use a load balancer to distribute traffic.
   • CUse a container registry with automated image builds and manually deploy images to a single VM using Docker Compose.
   • DDeploy each microservice as a separate container on a single VM and use systemd to restart them on failure.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company stores sensitive documents in an object storage bucket. The security policy requires that all access to the bucket be logged and that data be automatically deleted after 90 days. Which combination of features should be enabled?

   • AEnable server-side encryption and use a storage class that offers low durability.
   • BUse a pre-signed URL for all access and set a bucket policy to deny public access.
   • CEnable bucket logging and configure a lifecycle rule to expire objects after 90 days.
   • DEnable versioning and use multi-factor authentication for the bucket.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is a key runtime security consideration for containers?

   • ADisabling all security monitoring to improve performance.
   • BEnsuring containers run with the least privilege necessary.
   • CAllowing containers to share the host's network namespace to simplify connectivity.
   • DUsing the same image for all containers to ensure consistency.
   Reveal Solution Discussion Select an answer first