Question 63 of 318
Single answerFor compliance reasons, an organization needs to ensure that in-scope PCI Kubernetes Pods reside on `in-scope` Nodes only. These Nodes can only contain the
`in-scope` Pods.
How should the organization achieve this objective?
`in-scope` Pods.
How should the organization achieve this objective?
AAdd a nodeSelector field to the pod configuration to only use the Nodes labeled inscope: true.
BCreate a node pool with the label inscope: true and a Pod Security Policy that only allows the Pods to run on Nodes with that label.
✓CPlace a taint on the Nodes with the label inscope: true and effect NoSchedule and a toleration to match in the Pod configuration.
DRun all in-scope Pods in the namespace ג€in-scope-pciג€.
✓
Correct Answer: C
Place a taint on the Nodes with the label inscope: true and effect NoSchedule and a toleration to match in the Pod configuration.
▥
Explanation
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of Google certification topics.