MENU
Create a RuntimeClass named untrusted using the prepared runtime handler named runsc.
Create a Pods of image alpine:3.13.2 in the Namespace default to run on the gVisor runtime class.
Suggested Answer: A
Get Premium CKS Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
FR
Freida
11 months ago
Not sure about using gVisor for all workloads, though.
AR
Arlyne
12 months ago
Yup, running it in the default namespace is straightforward.
SH
Sherita
12 months ago
Wait, alpine:3.13.2? Is that the latest version?
CH
Chantay
1 year ago
Totally agree, gVisor is a solid choice for security.
AR
Arlene
1 year ago
Just created a RuntimeClass named untrusted with runsc!
DA
Daren
1 year ago
I feel like I need to double-check how to reference the gVisor runtime in the pod spec; it seems tricky!
CE
Celestina
1 year ago
I believe the command to create the pod should include the runtime class name, but I might be mixing it up with another resource type.
VI
Virgie
1 year ago
I remember practicing a similar question about creating a pod with a specific runtime class, but I can't recall the exact command for specifying the runtime.
EL
Ellen
1 year ago
I think we need to define the RuntimeClass first, but I'm not entirely sure about the exact syntax for that.
CH
Cheryl
1 year ago
Okay, I've got an idea. Since we need to block remote printer access but allow it internally, the Extended ACL option sounds like it could work. That should let us create different rules based on the user's location.
AS
Ashley
1 year ago
Hmm, I'm not totally sure about this one. I think it might be B, where you can set the order of the sections numerically, but I'm not 100% confident.
SH
Shaunna
1 year ago
I practiced a question like this, and I believe XMPP was the right protocol for inter-cluster communication. Seems to fit here too.