GoogleGoogle
PROFESSIONAL-CLOUD-DEVELOPER · Question #312
PROFESSIONAL-CLOUD-DEVELOPER Question #312: Real Exam Question with Answer & Explanation
The correct answer is D: Use Binary Authorization to enforce a policy that only allows images that have been signed with a. https://cloud.google.com/run/docs/deploying
Managing Application Security
Question
You are migrating a containerized application to Cloud Run. You plan to use Cloud Build to build your container image and push it to Artifact Registry, and you plan to use Cloud Deploy to deploy the image to production. You need to ensure that only secure images are deployed to production. What should you do?
Options
- AUse Cloud Armor in front of Cloud Run to protect the container image from threats.
- BUse Artifact Analysis to scan the image for vulnerabilities. Use Cloud Key Management Service to
- CUse Secret Manager to store the encrypted image. Deploy this image to production.
- DUse Binary Authorization to enforce a policy that only allows images that have been signed with a
Explanation
Topics
#Container Security#Deployment Security#Binary Authorization#CI/CD Security
Community Discussion
No community discussion yet for this question.