nerdexam
Google

PROFESSIONAL-CLOUD-DEVOPS-ENGINEER · Question #100

You need to enforce several constraint templates across your Google Kubernetes Engine (GKE) clusters. The constraints include policy parameters, such as restricting the Kubernetes API. You must…

The correct answer is C. Configure Anthos Config Management with the GitHub repository. When there is a change in the. Anthos Config Management (ACM) is Google's managed GitOps solution that natively synchronizes Kubernetes configuration - including OPA/Gatekeeper constraint templates and constraints - from a Git repository to GKE clusters. When a change is pushed to GitHub, ACM detects it and…

Submitted by eva_at· Apr 18, 2026Building and implementing CI/CD pipelines for a service

Question

You need to enforce several constraint templates across your Google Kubernetes Engine (GKE) clusters. The constraints include policy parameters, such as restricting the Kubernetes API. You must ensure that the policy parameters are stored in a GitHub repository and automatically applied when changes occur. What should you do?

Options

  • ASet up a GitHub action to trigger Cloud Build when there is a parameter change. In Cloud Build,
  • BWhen there is a change in GitHub. use a web hook to send a request to Anthos Service Mesh,
  • CConfigure Anthos Config Management with the GitHub repository. When there is a change in the
  • DConfigure Config Connector with the GitHub repository. When there is a change in the repository,

How the community answered

(28 responses)
  • B
    7% (2)
  • C
    82% (23)
  • D
    11% (3)

Explanation

Anthos Config Management (ACM) is Google's managed GitOps solution that natively synchronizes Kubernetes configuration - including OPA/Gatekeeper constraint templates and constraints - from a Git repository to GKE clusters. When a change is pushed to GitHub, ACM detects it and automatically applies the updated policies, satisfying the requirement for automatic application on change. Option A adds unnecessary CI/CD complexity. Option B confuses Anthos Service Mesh (traffic management) with policy management. Option D (Config Connector) manages Google Cloud resources as Kubernetes objects, not Kubernetes admission policies.

Topics

#Anthos Config Management#GitOps#Policy Enforcement#GKE Configuration Management

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-DEVOPS-ENGINEER Practice