A Kubernetes cluster has a node that is being decommissioned. The administrator wants to move the running pods to other nodes gracefully. Which command should be used?

`kubectl taint nodes key=value:NoSchedule`

What is the primary role of the kubelet on a worker node?

To store the cluster state in a distributed key-value store.

To manage the network routing and load balancing for services.

To expose the Kubernetes API to external clients.

To ensure that containers in assigned pods are running and healthy.

A penetration tester is analyzing a container image to identify potential vulnerabilities. They notice that the image is built from multiple layers and want to understand how these layers are used at runtime. Which statement accurately describes container image layers?

Layers are copied into the container's memory at runtime

Layers are read-only and are stacked to form the container's filesystem

Layers are stored separately and are merged only when the container is deleted

Layers are writable and are modified when the container runs

How do containers within the same pod communicate with each other?

By using the pod's IP address and the container's name.

Through a Service that load balances traffic to each container.

Using localhost and different port numbers.

Through a persistent volume that is mounted into both containers.

GIAC Cloud Penetration Tester

Domain 4Objective 1

Containers and Kubernetes Structure GCPN Practice Questions (Page 2)

Part of the Container and Kubernetes Security domain, which makes up ~11% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–9 in this domain), expect 6–9 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

6concepts

Questions 6–10

6foundation · easy
Which Kubernetes component is responsible for deciding which node a new pod should run on?
Select an answer first
7application · medium
A Kubernetes cluster has a node that is being decommissioned. The administrator wants to move the running pods to other nodes gracefully. Which command should be used?
Select an answer first
8foundation · easy
What is the primary role of the kubelet on a worker node?
Select an answer first
9application · medium
A penetration tester is analyzing a container image to identify potential vulnerabilities. They notice that the image is built from multiple layers and want to understand how these layers are used at runtime. Which statement accurately describes container image layers?
Select an answer first
10foundation · easy
How do containers within the same pod communicate with each other?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCPN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCPN” is a trademark of its owner, used for identification only.