Examtopics

Professional Cloud DevOps Engineer

15
17

Topic 1 Question 16
You are managing the production deployment to a set of Google Kubernetes Engine (GKE) clusters. You want to make sure only images which are successfully built by your trusted CI/CD pipeline are deployed to production. What should you do?
- Enable Cloud Security Scanner on the clusters.
- Enable Vulnerability Analysis on the Container Registry.
- Set up the Kubernetes Engine clusters as private clusters.
- Set up the Kubernetes Engine clusters with Binary Authorization.
解説
Reference: https://codelabs.developers.google.com/codelabs/cloud-builder-gke-continuous-deploy/index.html#1

ユーザの投票
コメント(17)
- D because binary authorization is deploy time security tool and it will allow only trusted and attested containers into GKE
  
  👍 25
  devopsbatch2021/06/02
- D 100%
  
  👍 8
  Charun2021/06/28
- D https://cloud.google.com/binary-authorization/docs/overview
  
  👍 4
  exploregcp2021/07/22
シャッフルモード

15
17