nerdexam
GoogleGoogle

PROFESSIONAL-CLOUD-DEVELOPER · Question #247

PROFESSIONAL-CLOUD-DEVELOPER Question #247: Real Exam Question with Answer & Explanation

The correct answer is D: Store the credential in Secret Manager. Create a Google service account (GSA) to read the. https://kubernetes.io/docs/concepts/configuration/secret/

Implementing application security

Question

Your application is running as a container in a Google Kubernetes Engine cluster. You need to add a secret to your application using a secure approach. What should you do?

Options

  • ACreate a Kubernetes Secret, and pass the Secret as an environment variable to the container.
  • BEnable Application-layer Secret Encryption on the cluster using a Cloud Key Management
  • CStore the credential in Cloud KMS. Create a Google service account (GSA) to read the credential
  • DStore the credential in Secret Manager. Create a Google service account (GSA) to read the

Explanation

https://kubernetes.io/docs/concepts/configuration/secret/

Topics

#Secret Management#Kubernetes Engine#Application Security#Google Cloud IAM

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-DEVELOPER PracticeBrowse All PROFESSIONAL-CLOUD-DEVELOPER Questions