How do immutable workloads affect security overhead?

The correct answer is that immutable workloads reduce the management of the hosts. Immutable workloads are designed to be unchangeable once they are deployed. This characteristic simplifies the management of cloud resources significantly. Instead of making changes to running virtual machines or containers, organizations can simply deploy a new version of the application or service whenever an update or patch is necessary.

This process minimizes the complexities involved in configuration management, patching, and updates since the existing infrastructure remains untouched and simply replaced with a new version if required. As a result, there is less overhead related to ongoing security management, as administrators do not have to continuously monitor and modify the existing environments for vulnerabilities or configuration errors. Instead, they can focus on building and deploying consistently secure and compliant images for workloads.

In contrast, the other options do not accurately capture the essence of what immutable workloads accomplish. They do not inherently perform automatic vulnerability scans, nor do they limit the number of instances in a cluster, nor do they create patches for running workloads. This highlights why the first choice regarding reduced management is the most relevant to understanding the security implications of immutable workloads.