Professional Cloud Security EngineerDemo

By Google · Question Mode

QuestionQ141

Managing operations

A vulnerability patch has been released, and a DevOps team must update its currently running containers in Google Kubernetes Engine (GKE).

How should the DevOps team do this?

  • A Use Puppet or Chef to push out the patch to the running container.
  • B Verify that auto upgrade is enabled; if so, Google will upgrade the nodes in a GKE cluster.
  • C Update the application code or apply a patch, build a new image, and redeploy it.
  • D Configure containers to automatically upgrade when the base image is available in Container Registry.
Explanation

Container workload updates are performed by building an image that includes the application update or vulnerability patch and rolling out a deployment that references the new image. GKE supports updating a Deployment’s Pod image, which replaces Pods with instances using the updated image; node auto-upgrades do not patch the application software inside running containers.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!