nerdexam
Google

PROFESSIONAL-CLOUD-DEVOPS-ENGINEER · Question #142

You are managing the production deployment to a set of Google Kubernetes Engine (GKE) clusters. You want to make sure only images which are successfully built by your trusted CI/CD pipeline are…

The correct answer is D. Set up the Kubernetes Engine clusters with Binary Authorization. To ensure that only images successfully built by your trusted CI/CD pipeline are deployed to production on Google Kubernetes Engine (GKE) clusters, you should set up the Kubernetes Engine clusters with Binary Authorization.

Submitted by tom_us· Apr 18, 2026Building and implementing CI/CD pipelines for a service

Question

You are managing the production deployment to a set of Google Kubernetes Engine (GKE) clusters. You want to make sure only images which are successfully built by your trusted CI/CD pipeline are deployed to production. What should you do?

Options

  • AEnable Cloud Security Scanner on the clusters.
  • BEnable Vulnerability Analysis on the Container Registry.
  • CSet up the Kubernetes Engine clusters as private clusters.
  • DSet up the Kubernetes Engine clusters with Binary Authorization.

How the community answered

(30 responses)
  • A
    7% (2)
  • B
    3% (1)
  • C
    10% (3)
  • D
    80% (24)

Explanation

To ensure that only images successfully built by your trusted CI/CD pipeline are deployed to production on Google Kubernetes Engine (GKE) clusters, you should set up the Kubernetes Engine clusters with Binary Authorization.

Topics

#GKE#Container Security#Binary Authorization#Deployment Policy Enforcement

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-DEVOPS-ENGINEER Practice