Your company is developing a web-based application. You need to make sure that production deployments are linked to source code commits and are fully auditable. What should you do?

The correct answer is C. Make the container tag match the source code commit hash. https://cloud.google.com/architecture/best-practices-for-building- containers#tagging_using_the_git_commit_hash You can use this commit hash as a version number for your software, but also as a tag for the Docker image built from this specific version of your software. Doing so…

Submitted by kwame.gh· Mar 30, 2026Managing implementation

Question

Your company is developing a web-based application. You need to make sure that production deployments are linked to source code commits and are fully auditable. What should you do?

Options

AMake sure a developer is tagging the code commit with the date and time of commit.
BMake sure a developer is adding a comment to the commit that links to the deployment.
CMake the container tag match the source code commit hash.
DMake sure the developer is tagging the commits with latest.

How the community answered

(24 responses)

B
4% (1)
C
92% (22)
D
4% (1)

Explanation

https://cloud.google.com/architecture/best-practices-for-building- containers#tagging_using_the_git_commit_hash You can use this commit hash as a version number for your software, but also as a tag for the Docker image built from this specific version of your software. Doing so makes Docker images traceable: because in this case the image tag is immutable, you instantly know which specific version of your software is running inside a given container.

Topics

#container tagging#commit hash#deployment auditability#CI/CD traceability

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-ARCHITECT Practice