Containment focuses on stopping the spread or impact of an active incident without yet removing the root cause. Cordon-and-drain operations isolate the affected GKE nodes so the malicious workload cannot continue to consume resources, making step 3 a containment action.
Eradication follows containment and removes the attacker's foothold by eliminating malware, vulnerable images, or misconfigurations. Rebuilding the node pool from a trusted golden image (step 4) wipes any persistence mechanisms and restores a clean state, so it represents eradication.
Steps 1 and 2 relate to preparedness and detection, while step 5 belongs to post-incident analysis.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the containment phase in incident response?
Open an interactive chat with Bash
What does the eradication phase in incident response involve?
Open an interactive chat with Bash
What is a 'golden image' in the context of securing GKE node pools?
Open an interactive chat with Bash
What is the containment phase in incident response?
Open an interactive chat with Bash
What does rebuilding a node pool from a golden image mean?
Open an interactive chat with Bash
What is a logs-based metric and how does it help in detection?
Open an interactive chat with Bash
GCP Professional Cloud Architect
Ensuring solution and operations excellence
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .