PROFESSIONAL-CLOUD-ARCHITECT · Question #377
Your company is rapidly deploying containerized microservices on Google Kubernetes Engine (GKE) using a robust CI/CD pipeline. Security is a top priority, and you need to implement a comprehensive and
The correct answer is A. Review the security reports generated by Artifact Analysis for each container image before C. Enable Artifact Analysis for the container images, and stop deployment if critical vulnerabilities. Artifact Analysis provides automatic vulnerability scanning for container images stored in Artifact Registry, allowing visibility into known vulnerabilities before deployment. Enforcing a policy that blocks deployments when critical vulnerabilities are detected ensures that insec
Question
Options
- AReview the security reports generated by Artifact Analysis for each container image before
- BIncorporate vulnerability scanning before building container images, and use Google-maintained
- CEnable Artifact Analysis for the container images, and stop deployment if critical vulnerabilities
- DUse a custom security policy within your container image that restricts access to specific network
- EEnable Shielded GKE Nodes on the production cluster to automatically block the execution of
How the community answered
(31 responses)- A81% (25)
- B3% (1)
- D10% (3)
- E6% (2)
Explanation
Artifact Analysis provides automatic vulnerability scanning for container images stored in Artifact Registry, allowing visibility into known vulnerabilities before deployment. Enforcing a policy that blocks deployments when critical vulnerabilities are detected ensures that insecure images never reach the GKE production environment, providing an effective and scalable security control integrated into the CI/CD pipeline.
Topics
Community Discussion
No community discussion yet for this question.