nerdexam
Google

ASSOCIATE-CLOUD-ENGINEER · Question #43

You are working a System Administrator and have been asked to make sure that all images are patched up to date and developers are not allowed to use old images which are not up to date as per PCI comp

The correct answer is C. Mark image as obsolete to prevent users from using the old image.. To enforce the use of updated images and prevent developers from using old, unpatched ones for PCI compliance, the most effective programmatic method is to mark old images as obsolete.

Submitted by sofia.br· Mar 30, 2026Ensuring successful operation of a cloud solution

Question

You are working a System Administrator and have been asked to make sure that all images are patched up to date and developers are not allowed to use old images which are not up to date as per PCI compliance. How would you achieve this?

Options

  • ADrop a mail to all the developers regarding which image to use whenever you patch images.
  • BMark image as deprecated to prevent users from using the old image.
  • CMark image as obsolete to prevent users from using the old image.
  • DNone of the above.

How the community answered

(43 responses)
  • A
    2% (1)
  • B
    5% (2)
  • C
    93% (40)

Why each option

To enforce the use of updated images and prevent developers from using old, unpatched ones for PCI compliance, the most effective programmatic method is to mark old images as obsolete.

ADrop a mail to all the developers regarding which image to use whenever you patch images.

Sending an email is a procedural control that relies on human action and compliance, which is prone to errors and does not programmatically prevent developers from using outdated images, failing to meet strict compliance needs.

BMark image as deprecated to prevent users from using the old image.

Marking an image as `DEPRECATED` issues a warning when users attempt to create instances from it but does not prevent the creation of new instances, making it less effective for strict compliance compared to `OBSOLETE`.

CMark image as obsolete to prevent users from using the old image.Correct

In Google Cloud Compute Engine, marking an image as `OBSOLETE` effectively prevents users from creating new instances from that image. This is a strong enforcement mechanism, ensuring that developers cannot accidentally or intentionally use old, unpatched images, thereby helping to meet compliance requirements like PCI that mandate the use of secure and up-to-date software.

DNone of the above.

There is a direct method (marking images as obsolete) available in Google Cloud to achieve the stated goal.

Concept tested: Google Compute Engine image lifecycle management

Source: https://cloud.google.com/compute/docs/images/managing-images#state

Topics

#Compute Engine images#image lifecycle#deprecated vs obsolete#PCI compliance

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full ASSOCIATE-CLOUD-ENGINEER Practice