PCSE Practice Question: Managing Operations in a Cloud Solution Environment
Your company has hundreds of GKE clusters across multiple projects. You need to ensure that all clusters have Container Threat Detection enabled. Which approach is most scalable?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Write a script using gcloud container clusters update with --enable-threat-detection flag
SCC Premium includes Container Threat Detection. To enable it across clusters, you can use an organization policy or a custom script. Using Terraform or Config Controller to manage clusters as code is scalable. The most straightforward way: enable SCC Premium at the organization level and then enable Container Threat Detection per cluster via the API or gcloud. A script using gcloud commands can iterate through all clusters.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Create a new organization policy that enforces Container Threat Detection on all clusters
Why it's wrong here
No such organization policy exists for Container Threat Detection; it must be enabled per cluster.
- ✗
Deploy a DaemonSet that enables Container Threat Detection
Why it's wrong here
Container Threat Detection is a GKE feature, not a DaemonSet; it's managed by Google.
- ✓
Write a script using gcloud container clusters update with --enable-threat-detection flag
Why this is correct
The gcloud command can enable Container Threat Detection on existing clusters; scripting iterates over all clusters.
- ✗
Manually enable Container Threat Detection in each cluster via the Cloud Console
Why it's wrong here
Not scalable for hundreds of clusters.
Go deeper
Related to this question
About these practice questions
This PCSE question is part of Courseiva's 960-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCSE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCSE exam.