GCP Professional Cloud Architect Practice Question

During an after-action review of a cryptocurrency-mining compromise in a production GKE cluster, the team lists these documented activities:

  1. Draft runbooks and schedule a game-day exercise.
  2. Create logs-based metrics that alert on abnormal CPU spikes.
  3. Cordon and drain the compromised nodes, isolating the workload.
  4. Recreate the node pool from a verified golden image.
  5. Hold a blameless retrospective and update IAM hardening controls.

Which numbered activities correspond to the containment phase and the eradication phase of the incident-response lifecycle, respectively?

  • 4 for containment, 5 for eradication

  • 3 for containment, 4 for eradication

  • 2 for containment, 3 for eradication

  • 2 for containment, 4 for eradication

GCP Professional Cloud Architect
Ensuring solution and operations excellence
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot