What should they do?

A DevOps team will create a new container to run on Google Kubernetes Engine. As the application will be internet-facing, they want to minimize the attack surface of the container.

What should they do?
A . Use Cloud Build to build the container images.
B . Build small containers using small base images.
C . Delete non-used versions from Container Registry.
D . Use a Continuous Delivery tool to deploy the application.

Answer: B

Explanation:

Small containers usually have a smaller attack surface as compared to containers that use large base images. https://cloud.google.com/blog/products/gcp/kubernetes-best-practices-how-and-why-to-build-small-container-images