An organization has multiple teams sharing a Kubernetes cluster. They want to isolate resources and apply different quotas per team. Which set of Kubernetes objects should they use?

Namespaces with ResourceQuotas and LimitRanges

PersistentVolumes with different storage classes

Deployments with pod anti-affinity rules

Which statement best describes the relationship between container images, layers, and the runtime environment?

The runtime environment is stored as a layer inside the image, and it is executed directly by the host kernel.

A container image is a single monolithic file that is loaded entirely into memory when a container starts.

A container image consists of read-only layers that are stacked, and the runtime environment adds a writable layer on top when a container is started.

Container layers are writable at rest, and the runtime environment freezes them to make the image immutable.

A stateful application requires persistent storage that can be accessed by multiple pods simultaneously in read-write mode. The team is using a cloud provider that offers a shared filesystem. Which volume type should they use?

A PersistentVolume with ReadWriteOnce access mode

A PersistentVolume with ReadWriteMany access mode

GIAC Cloud Penetration Tester

Domain 4Objective 1

Containers and Kubernetes Structure GCPN Practice Questions (Page 5)

Part of the Container and Kubernetes Security domain, which makes up ~11% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–9 in this domain), expect 6–9 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

6concepts

Questions 21–25

21foundation · easy
Which Kubernetes object is responsible for ensuring that a specified number of pod replicas are running at all times?
Select an answer first
22application · medium
A team manages multiple applications in the same Kubernetes cluster. They want to isolate resources and apply different security policies to each application. Which Kubernetes feature should they use to achieve this?
Select an answer first
23application · easy
An organization has multiple teams sharing a Kubernetes cluster. They want to isolate resources and apply different quotas per team. Which set of Kubernetes objects should they use?
Select an answer first
24foundation · easy
Which statement best describes the relationship between container images, layers, and the runtime environment?
Select an answer first
25expert · hard
A stateful application requires persistent storage that can be accessed by multiple pods simultaneously in read-write mode. The team is using a cloud provider that offers a shared filesystem. Which volume type should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCPN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCPN” is a trademark of its owner, used for identification only.

Containers and Kubernetes Structure GCPN Practice Questions (Page 5)

Questions 21–25

Which Kubernetes object is responsible for ensuring that a specified number of pod replicas are running at all times?

A team manages multiple applications in the same Kubernetes cluster. They want to isolate resources and apply different security policies to each application. Which Kubernetes feature should they use to achieve this?

An organization has multiple teams sharing a Kubernetes cluster. They want to isolate resources and apply different quotas per team. Which set of Kubernetes objects should they use?

Which statement best describes the relationship between container images, layers, and the runtime environment?

A stateful application requires persistent storage that can be accessed by multiple pods simultaneously in read-write mode. The team is using a cloud provider that offers a shared filesystem. Which volume type should they use?

Keep studying — Container and Kubernetes Security