@xdev-asia/xdev-knowledge-mcp 1.0.43 → 1.0.44

package/content/series/luyen-thi/luyen-thi-cka/index.md

@@ -0,0 +1,217 @@
+---
+id: lt-cka-series-001
+title: "Luyện thi CKA — Certified Kubernetes Administrator"
+slug: luyen-thi-cka
+description: >-
+  Lộ trình ôn tập toàn diện cho kỳ thi CKA (Certified Kubernetes Administrator).
+  Bao phủ đầy đủ 5 domain hands-on: Troubleshooting (30%), Cluster Architecture (25%),
+  Services & Networking (20%), Workloads & Scheduling (15%), Storage (10%).
+  12 bài học kèm bài tập thực hành terminal.
+
+featured_image: null
+level: intermediate
+duration_hours: 35
+lesson_count: 12
+price: '0.00'
+is_free: true
+view_count: 0
+average_rating: '0.00'
+review_count: 0
+enrollment_count: 0
+meta: null
+published_at: '2026-04-05T10:00:00.000000Z'
+created_at: '2026-04-05T10:00:00.000000Z'
+
+author:
+  id: 019c9616-d2b4-713f-9b2c-40e2e92a05cf
+  name: Duy Tran
+  avatar: avatars/7e8eb5c6-4cac-455b-a701-4060f085d501.jpeg
+
+category:
+  id: 019c9616-cat9-7009-a009-000000000009
+  name: Luyện thi chứng chỉ
+  slug: luyen-thi
+
+tags:
+
+- name: Kubernetes
+    slug: kubernetes
+- name: CKA
+    slug: cka
+- name: CNCF
+    slug: cncf
+- name: Chứng chỉ
+    slug: chung-chi
+- name: DevOps
+    slug: devops
+- name: Linux Foundation
+    slug: linux-foundation
+
+quiz_slug: cka
+
+sections:
+
+- id: cka-section-01
+    title: "Domain 1: Cluster Architecture, Installation & Configuration (25%)"
+    description: kubeadm, RBAC, cluster upgrade, etcd backup/restore
+    sort_order: 1
+    lessons:
+  - id: cka-d1-l01
+        title: "Bài 1: Kubernetes Architecture & kubeadm Cluster Setup"
+        slug: 01-kien-truc-cka-kubeadm
+        description: >-
+          Control plane components sâu. kubeadm init, join, config.
+          High Availability cluster topology. Certificate rotation.
+          kubectl config, contexts, kubeconfig.
+        duration_minutes: 65
+        is_free: true
+        sort_order: 1
+        video_url: null
+  - id: cka-d1-l02
+        title: "Bài 2: Cluster Upgrade với kubeadm"
+        slug: 02-cluster-upgrade-kubeadm
+        description: >-
+          Upgrade strategy: control plane → worker nodes.
+          drain, cordon, uncordon. Version skew policy.
+          kubeadm upgrade plan/apply. Rollback procedures.
+        duration_minutes: 60
+        is_free: true
+        sort_order: 2
+        video_url: null
+  - id: cka-d1-l03
+        title: "Bài 3: RBAC — Role-Based Access Control"
+        slug: 03-rbac-cka
+        description: >-
+          Role vs ClusterRole. RoleBinding vs ClusterRoleBinding.
+          ServiceAccounts và token. kubectl auth can-i.
+          Aggregated ClusterRoles. Least privilege patterns.
+        duration_minutes: 60
+        is_free: true
+        sort_order: 3
+        video_url: null
+
+- id: cka-section-02
+    title: "Domain 2: Workloads & Scheduling (15%)"
+    description: Deployments, DaemonSets, scheduling, taints/tolerations, affinity
+    sort_order: 2
+    lessons:
+  - id: cka-d2-l01
+        title: "Bài 4: Deployments, DaemonSets & StatefulSets"
+        slug: 04-deployments-daemonsets-statefulsets
+        description: >-
+          Rolling update strategies. Rollback. ReplicaSet vs Deployment.
+          DaemonSet use cases. StatefulSet: headless service, volumeClaimTemplates.
+          Resource requests & limits. QoS classes.
+        duration_minutes: 60
+        is_free: true
+        sort_order: 4
+        video_url: null
+  - id: cka-d2-l02
+        title: "Bài 5: Scheduling — Taints, Tolerations & Affinity"
+        slug: 05-scheduling-taints-affinity
+        description: >-
+          Manual scheduling (nodeName, nodeSelector). Node Affinity/Anti-affinity.
+          Pod Affinity/Anti-affinity. Taints & Tolerations.
+          Priority Classes. Resource quotas & LimitRanges.
+        duration_minutes: 60
+        is_free: true
+        sort_order: 5
+        video_url: null
+
+- id: cka-section-03
+    title: "Domain 3: Services & Networking (20%)"
+    description: Services, DNS, Ingress, NetworkPolicies, CNI
+    sort_order: 3
+    lessons:
+  - id: cka-d3-l01
+        title: "Bài 6: Services, Endpoints & CoreDNS"
+        slug: 06-services-endpoints-coredns
+        description: >-
+          ClusterIP, NodePort, LoadBalancer, ExternalName, Headless.
+          Endpoints & EndpointSlices. CoreDNS configuration.
+          Service discovery patterns. kube-proxy modes (iptables, IPVS).
+        duration_minutes: 60
+        is_free: true
+        sort_order: 6
+        video_url: null
+  - id: cka-d3-l02
+        title: "Bài 7: Ingress, Network Policies & CNI"
+        slug: 07-ingress-networkpolicies-cni
+        description: >-
+          Ingress controllers (nginx). Ingress rules, TLS.
+          NetworkPolicy: ingress/egress rules, label selectors.
+          CNI plugins: Calico, Flannel, Cilium overview.
+          Pod CIDR vs Service CIDR.
+        duration_minutes: 65
+        is_free: true
+        sort_order: 7
+        video_url: null
+
+- id: cka-section-04
+    title: "Domain 4: Storage (10%)"
+    description: PV, PVC, StorageClass, volumes
+    sort_order: 4
+    lessons:
+  - id: cka-d4-l01
+        title: "Bài 8: Persistent Volumes, PVCs & StorageClass"
+        slug: 08-persistent-volumes-storageclass
+        description: >-
+          PersistentVolume, PersistentVolumeClaim lifecycle. Access modes.
+          Reclaim policies. StorageClass & dynamic provisioning.
+          hostPath, emptyDir, NFS. VolumeMount vs VolumeFrom.
+        duration_minutes: 55
+        is_free: true
+        sort_order: 8
+        video_url: null
+
+- id: cka-section-05
+    title: "Domain 5: Troubleshooting (30%)"
+    description: Node, workload, networking troubleshooting, etcd backup
+    sort_order: 5
+    lessons:
+  - id: cka-d5-l01
+        title: "Bài 9: etcd Backup & Restore"
+        slug: 09-etcd-backup-restore
+        description: >-
+          etcd architecture. etcdctl snapshot save/restore.
+          Environment variables: ETCDCTL_API, certificates.
+          Static pod manifest cho etcd. Recovery procedures.
+          Encryption at rest configuration.
+        duration_minutes: 55
+        is_free: true
+        sort_order: 9
+        video_url: null
+  - id: cka-d5-l02
+        title: "Bài 10: Troubleshooting Nodes & Cluster"
+        slug: 10-troubleshooting-nodes
+        description: >-
+          Node NotReady: kubelet, container runtime issues.
+          journalctl, systemctl debugging. Certificate issues.
+          Control plane component failures. Static pods.
+          kubectl describe node, kubectl get events.
+        duration_minutes: 60
+        is_free: true
+        sort_order: 10
+        video_url: null
+  - id: cka-d5-l03
+        title: "Bài 11: Troubleshooting Workloads"
+        slug: 11-troubleshooting-workloads
+        description: >-
+          Pod stuck states: Pending, CrashLoopBackOff, ImagePullBackOff, OOMKilled.
+          kubectl logs, exec, describe. Init container debugging.
+          Resource constraints. Liveness/Readiness probe failures.
+        duration_minutes: 60
+        is_free: true
+        sort_order: 11
+        video_url: null
+  - id: cka-d5-l04
+        title: "Bài 12: Troubleshooting Networking & Exam Strategy"
+        slug: 12-troubleshooting-networking-exam
+        description: >-
+          DNS resolution failures. Service not reachable. kube-proxy issues.
+          Network policy blocking traffic. nslookup, curl debugging.
+          CKA exam tips: time management, kubectl shortcuts, imperative commands.
+        duration_minutes: 60
+        is_free: true
+        sort_order: 12
+        video_url: null

package/content/series/luyen-thi/luyen-thi-ckad/index.md

@@ -0,0 +1,199 @@
+---
+id: lt-ckad-series-001
+title: "Luyện thi CKAD — Certified Kubernetes Application Developer"
+slug: luyen-thi-ckad
+description: >-
+  Lộ trình ôn tập toàn diện cho kỳ thi CKAD (Certified Kubernetes Application Developer).
+  Bao phủ đầy đủ 5 domain hands-on: App Environment & Security (25%), App Design & Build (20%),
+  App Deployment (20%), Services & Networking (20%), App Observability (15%).
+  10 bài học kèm bài tập thực hành terminal.
+
+featured_image: null
+level: intermediate
+duration_hours: 28
+lesson_count: 10
+price: '0.00'
+is_free: true
+view_count: 0
+average_rating: '0.00'
+review_count: 0
+enrollment_count: 0
+meta: null
+published_at: '2026-04-05T10:00:00.000000Z'
+created_at: '2026-04-05T10:00:00.000000Z'
+
+author:
+  id: 019c9616-d2b4-713f-9b2c-40e2e92a05cf
+  name: Duy Tran
+  avatar: avatars/7e8eb5c6-4cac-455b-a701-4060f085d501.jpeg
+
+category:
+  id: 019c9616-cat9-7009-a009-000000000009
+  name: Luyện thi chứng chỉ
+  slug: luyen-thi
+
+tags:
+
+- name: Kubernetes
+    slug: kubernetes
+- name: CKAD
+    slug: ckad
+- name: CNCF
+    slug: cncf
+- name: Chứng chỉ
+    slug: chung-chi
+- name: DevOps
+    slug: devops
+- name: Linux Foundation
+    slug: linux-foundation
+
+quiz_slug: ckad
+
+sections:
+
+- id: ckad-section-01
+    title: "Domain 1: Application Design and Build (20%)"
+    description: Multi-container pods, init containers, jobs, CronJobs
+    sort_order: 1
+    lessons:
+  - id: ckad-d1-l01
+        title: "Bài 1: Multi-container Pods & Init Containers"
+        slug: 01-multi-container-pods
+        description: >-
+          Sidecar pattern, Ambassador, Adapter patterns.
+          Init containers: sequencing, use cases.
+          Shared volumes giữa containers. Container ports.
+          Ephemeral containers cho debugging.
+        duration_minutes: 60
+        is_free: true
+        sort_order: 1
+        video_url: null
+  - id: ckad-d1-l02
+        title: "Bài 2: Jobs, CronJobs & Resource Management"
+        slug: 02-jobs-cronjobs-resources
+        description: >-
+          Job completions, parallelism, backoffLimit.
+          CronJob schedule syntax, concurrencyPolicy.
+          Resource requests vs limits. QoS classes: Guaranteed, Burstable, BestEffort.
+          LimitRange, ResourceQuota.
+        duration_minutes: 55
+        is_free: true
+        sort_order: 2
+        video_url: null
+
+- id: ckad-section-02
+    title: "Domain 2: Application Deployment (20%)"
+    description: Rolling updates, rollbacks, Helm, Kustomize, deployment strategies
+    sort_order: 2
+    lessons:
+  - id: ckad-d2-l01
+        title: "Bài 3: Rolling Updates, Rollbacks & Deployment Strategies"
+        slug: 03-rolling-updates-rollbacks
+        description: >-
+          RollingUpdate vs Recreate strategy. maxUnavailable, maxSurge.
+          kubectl rollout history/undo/status. Blue-Green deployment.
+          Canary deployment với labels. Pause/resume rollouts.
+        duration_minutes: 60
+        is_free: true
+        sort_order: 3
+        video_url: null
+  - id: ckad-d2-l02
+        title: "Bài 4: Helm & Kustomize Basics"
+        slug: 04-helm-kustomize
+        description: >-
+          Helm chart structure: Chart.yaml, values.yaml, templates/.
+          helm install/upgrade/rollback. Helm hooks.
+          Kustomize: base + overlays, patches, namePrefix.
+          kubectl apply -k vs helm install.
+        duration_minutes: 55
+        is_free: true
+        sort_order: 4
+        video_url: null
+
+- id: ckad-section-03
+    title: "Domain 3: Application Observability and Maintenance (15%)"
+    description: Probes, logging, monitoring, debugging
+    sort_order: 3
+    lessons:
+  - id: ckad-d3-l01
+        title: "Bài 5: Probes, Logging & Debugging"
+        slug: 05-probes-logging-debugging
+        description: >-
+          Liveness, Readiness, Startup probes: httpGet, exec, tcpSocket.
+          probe timing: initialDelaySeconds, periodSeconds, failureThreshold.
+          kubectl logs, stern. kubectl exec. Debugging crashed containers.
+          kubectl top (metrics-server). Events và conditions.
+        duration_minutes: 60
+        is_free: true
+        sort_order: 5
+        video_url: null
+
+- id: ckad-section-04
+    title: "Domain 4: Application Environment, Configuration & Security (25%)"
+    description: ConfigMaps, Secrets, SecurityContext, ServiceAccounts, RBAC
+    sort_order: 4
+    lessons:
+  - id: ckad-d4-l01
+        title: "Bài 6: ConfigMaps & Secrets"
+        slug: 06-configmaps-secrets
+        description: >-
+          ConfigMap: từ literal, file, env. Inject qua env / envFrom / volume.
+          Secret types: Opaque, TLS, dockerconfigjson. Base64 encoding.
+          Secrets as volumes vs env vars. External Secrets overview.
+        duration_minutes: 55
+        is_free: true
+        sort_order: 6
+        video_url: null
+  - id: ckad-d4-l02
+        title: "Bài 7: SecurityContext & Pod Security"
+        slug: 07-securitycontext-pod-security
+        description: >-
+          runAsUser, runAsGroup, fsGroup. readOnlyRootFilesystem.
+          capabilities: add/drop. allowPrivilegeEscalation.
+          Pod Security Standards: Privileged, Baseline, Restricted.
+          ServiceAccount: automountServiceAccountToken, projected volumes.
+        duration_minutes: 60
+        is_free: true
+        sort_order: 7
+        video_url: null
+  - id: ckad-d4-l03
+        title: "Bài 8: Resource Requests, Limits & QoS"
+        slug: 08-resources-qos
+        description: >-
+          CPU (millicores) vs Memory (MiB/GiB) units. requests vs limits.
+          OOMKilled và CPU throttling. QoS classes chi tiết.
+          LimitRange per container/pod. ResourceQuota per namespace.
+          Horizontal Pod Autoscaler (HPA) basics.
+        duration_minutes: 55
+        is_free: true
+        sort_order: 8
+        video_url: null
+
+- id: ckad-section-05
+    title: "Domain 5: Services & Networking (20%)"
+    description: Services, Ingress, Network Policies
+    sort_order: 5
+    lessons:
+  - id: ckad-d5-l01
+        title: "Bài 9: Services & Ingress"
+        slug: 09-services-ingress
+        description: >-
+          ClusterIP, NodePort, LoadBalancer, ExternalName. Headless service.
+          port vs targetPort vs nodePort. Ingress rules, path types.
+          TLS termination. Ingress class. Service vs Ingress use cases.
+        duration_minutes: 60
+        is_free: true
+        sort_order: 9
+        video_url: null
+  - id: ckad-d5-l02
+        title: "Bài 10: Network Policies & CKAD Exam Strategy"
+        slug: 10-networkpolicies-exam-strategy
+        description: >-
+          NetworkPolicy: podSelector, namespaceSelector, ipBlock.
+          Ingress vs Egress rules. Default deny patterns.
+          CKAD exam tips: imperative kubectl commands, --dry-run=client,
+          time management, bookmarking docs, common task templates.
+        duration_minutes: 60
+        is_free: true
+        sort_order: 10
+        video_url: null

package/content/series/luyen-thi/luyen-thi-gcp-ml-engineer/chapters/01-phan-1-problem-framing/lessons/01-bai-1-framing-ml-problems.md

@@ -0,0 +1,136 @@
+---
+id: 019c9619-lt03-l01
+title: 'Bài 1: Framing ML Problems — Supervised, Unsupervised, RL'
+slug: bai-1-framing-ml-problems
+description: >-
+  Cách xác định bài toán có cần ML không. Chọn đúng loại model.
+  Business metrics vs ML metrics. Data availability assessment.
+  Google's ML best practices.
+duration_minutes: 50
+is_free: true
+video_url: null
+sort_order: 1
+section_title: "Phần 1: ML Problem Framing & Architecture"
+course:
+  id: 019c9619-lt03-7003-c003-lt0300000003
+  title: 'Luyện thi Google Cloud Professional Machine Learning Engineer'
+  slug: luyen-thi-gcp-ml-engineer
+---
+
+<div style="text-align: center; margin: 2rem 0;">
+<img src="/storage/uploads/2026/04/gcp-mle-bai1-problem-framing.png" alt="ML Problem Framing Framework" style="max-width: 800px; width: 100%; border-radius: 12px;" />
+<p><em>ML Problem Framing: xác định bài toán, chọn loại model, và định nghĩa metrics theo chuẩn Google</em></p>
+</div>
+
+<h2 id="when-to-use-ml"><strong>1. Khi Nào Cần Dùng ML?</strong></h2>
+
+<p>Google ML certification thường hỏi về <strong>problem framing</strong> — tức là xác định xem bài toán có phù hợp để áp dụng ML không, và nếu có thì dùng loại ML nào. Đây là skill quan trọng của một professional ML Engineer.</p>
+
+<table>
+<thead><tr><th>Câu hỏi cần đặt ra</th><th>Nếu "Có"</th><th>Nếu "Không"</th></tr></thead>
+<tbody>
+<tr><td>Có pattern phức tạp trong data không?</td><td>ML có thể giúp</td><td>Rules-based logic đủ rồi</td></tr>
+<tr><td>Có đủ data (labels) không?</td><td>Supervised Learning</td><td>Unsupervised hoặc thu thập thêm</td></tr>
+<tr><td>Output có thể định nghĩa rõ ràng không?</td><td>Supervised ML</td><td>Cần clarify với stakeholders</td></tr>
+<tr><td>Bài toán có cần agent tương tác với environment không?</td><td>Reinforcement Learning</td><td>Supervised/Unsupervised</td></tr>
+</tbody>
+</table>
+
+<h2 id="ml-types"><strong>2. Các Loại ML và Khi Nào Dùng</strong></h2>
+
+<pre><code class="language-text">Problem Framing Decision Tree:
+
+Has labeled training data?
+    YES → Supervised Learning
+           ├── Output is category? → Classification
+           └── Output is number? → Regression
+
+    NO → Has examples, no labels?
+           YES → Unsupervised Learning
+                  ├── Find groups? → Clustering
+                  └── Find patterns/anomalies? → Density estimation
+           NO → Agent in environment?
+                  YES → Reinforcement Learning
+                  NO → Reconsider problem definition
+</code></pre>
+
+<table>
+<thead><tr><th>ML Type</th><th>When to Use</th><th>GCP Services</th></tr></thead>
+<tbody>
+<tr><td><strong>Supervised Classification</strong></td><td>Email spam, image labels, churn prediction</td><td>Vertex AI AutoML, BigQuery ML</td></tr>
+<tr><td><strong>Supervised Regression</strong></td><td>Price prediction, demand forecast</td><td>Vertex AI, BigQuery ML BQML_REGRESSOR</td></tr>
+<tr><td><strong>Unsupervised Clustering</strong></td><td>Customer segmentation, topic discovery</td><td>Vertex AI Custom Training (k-means)</td></tr>
+<tr><td><strong>Reinforcement Learning</strong></td><td>Game agents, robotics, ad bidding</td><td>Vertex AI + custom environment</td></tr>
+<tr><td><strong>Self-supervised</strong></td><td>LLMs, foundation models</td><td>Vertex AI Model Garden</td></tr>
+</tbody>
+</table>
+
+<h2 id="business-vs-ml-metrics"><strong>3. Business Metrics vs. ML Metrics</strong></h2>
+
+<p>Một trong những sai lầm phổ biến là <strong>optimize nhầm metric</strong>. Mục tiêu ML phải align với mục tiêu business.</p>
+
+<table>
+<thead><tr><th>Business Goal</th><th>Wrong ML Metric</th><th>Correct ML Metric</th></tr></thead>
+<tbody>
+<tr><td>Giảm doanh thu bị gian lận</td><td>Accuracy (99%!)</td><td>Recall (bắt được nhiều fraud)</td></tr>
+<tr><td>Giảm email spam trải nghiệm người dùng</td><td>Recall</td><td>Precision (ít false positive)</td></tr>
+<tr><td>Dự báo nhu cầu tồn kho</td><td>MSE</td><td>MAPE (scale-independent)</td></tr>
+<tr><td>Ranking sản phẩm trong search</td><td>Accuracy</td><td>NDCG, MRR (ranking metrics)</td></tr>
+</tbody>
+</table>
+
+<blockquote>
+<p><strong>Exam tip:</strong> Professional ML Engineer exam thường hỏi "which metric BEST aligns with the business objective". Khi thấy fraud/medical diagnosis → Recall. Khi thấy spam/precision-critical → Precision. Khi thấy class imbalance → F1 hoặc AUC-ROC.</p>
+</blockquote>
+
+<h2 id="data-assessment"><strong>4. Data Availability Assessment</strong></h2>
+
+<table>
+<thead><tr><th>Data Situation</th><th>ML Approach</th></tr></thead>
+<tbody>
+<tr><td>Nhiều labeled data</td><td>Fully supervised, train from scratch</td></tr>
+<tr><td>Ít labeled data (&lt;1000)</td><td><strong>Transfer Learning</strong> (pre-trained + fine-tune)</td></tr>
+<tr><td>Không có labels</td><td>Unsupervised hoặc thu thập labels (Vertex AI Data Labeling)</td></tr>
+<tr><td>Labels tốn kém</td><td><strong>Active Learning</strong> — label uncertain samples trước</td></tr>
+<tr><td>Dữ liệu không cân bằng</td><td>Oversampling, undersampling, class weights</td></tr>
+</tbody>
+</table>
+
+<h2 id="google-ml-practices"><strong>5. Google's ML Best Practices</strong></h2>
+
+<ul>
+<li><strong>Start simple</strong>: Bắt đầu với model đơn giản nhất, sau đó phức tạp hóa dần</li>
+<li><strong>Establish baseline</strong>: So sánh với heuristic/rules trước khi dùng ML</li>
+<li><strong>Data quality first</strong>: 80% thời gian ML project là data preparation</li>
+<li><strong>Reproducibility</strong>: Pipeline phải reproducible với cùng data</li>
+<li><strong>Monitor in production</strong>: Model decay theo thời gian — cần continuous monitoring</li>
+</ul>
+
+<h2 id="practice"><strong>6. Practice Questions</strong></h2>
+
+<p><strong>Q1:</strong> A company wants to identify which of its customers are most likely to cancel their subscription in the next 30 days. They have 3 years of historical customer behavior data with known churn events. Which ML approach should they use?</p>
+<ul>
+<li>A) Unsupervised clustering to find customer groups</li>
+<li>B) Reinforcement learning to optimize retention campaigns</li>
+<li>C) Supervised binary classification with historical churn labels ✓</li>
+<li>D) Anomaly detection to find unusual behavior</li>
+</ul>
+<p><em>Explanation: This is a classic supervised classification problem (churn = yes/no). Historical data with known outcomes (churned/not churned) provides the labels needed. Clustering would not predict individual churn probability. RL is for sequential decision making, not prediction.</em></p>
+
+<p><strong>Q2:</strong> A medical imaging ML model achieves 98% accuracy on test data but the business team is unsatisfied. The task is detecting rare cancer cells (1% prevalence). What is the most likely issue?</p>
+<ul>
+<li>A) The model is overfitting to training data</li>
+<li>B) Accuracy is the wrong metric — the model may be predicting "no cancer" for everything ✓</li>
+<li>C) The model needs more training iterations</li>
+<li>D) The test dataset is too small</li>
+</ul>
+<p><em>Explanation: With 1% prevalence, a model always predicting "no cancer" achieves 99% accuracy but has 0% recall — it misses every cancer case. For rare class problems, Recall (sensitivity) is the critical metric, not accuracy.</em></p>
+
+<p><strong>Q3:</strong> A startup has 500 labeled product images for a new custom classification task. Which training approach is MOST appropriate?</p>
+<ul>
+<li>A) Train a deep learning CNN from scratch on the 500 images</li>
+<li>B) Use AutoML Tabular on the image metadata</li>
+<li>C) Use Transfer Learning from a pre-trained image model ✓</li>
+<li>D) Apply K-Means clustering since the dataset is too small</li>
+</ul>
+<p><em>Explanation: With only 500 labeled examples, training from scratch would overfit severely. Transfer Learning reuses features from a model pre-trained on millions of images (e.g., ImageNet), requiring far less data to achieve good accuracy on the new task.</em></p>