
GIAC Cloud Penetration Tester
Domain 4Objective 1
Containers and Kubernetes Structure GCPN Practice Questions (Page 4)
Part of the Container and Kubernetes Security domain, which makes up ~11% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–9 in this domain), expect 6–9 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)
49questions here
10free pages
6concepts
Questions 16–20
- 16
In Kubernetes, what is the smallest deployable unit that can be scheduled and managed?
Select an answer first - 17
A pod in a Kubernetes cluster needs to communicate with a service in a different namespace. The service is named `db` in namespace `data`. The pod's namespace is `app`. Which DNS name should the pod use?
Select an answer first - 18
What is the purpose of a Kubernetes namespace?
Select an answer first - 19
A stateful application running in a Kubernetes cluster needs to persist data across pod restarts and be available to any pod that is scheduled on the same node. The cluster uses dynamically provisioned storage. Which storage object should be used?
Select an answer first - 20
A team runs a stateful application on Kubernetes with a PersistentVolumeClaim (PVC). They need to ensure that the data is replicated across multiple availability zones to protect against zone failures. Which approach should they use?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCPN” is a trademark of its owner, used for identification only.