Google
PROFESSIONAL-CLOUD-DEVOPS-ENGINEER · Question #5
PROFESSIONAL-CLOUD-DEVOPS-ENGINEER Question #5: Real Exam Question with Answer & Explanation
Sign in or unlock PROFESSIONAL-CLOUD-DEVOPS-ENGINEER to reveal the answer and full explanation for question #5. The question stem and answer options stay visible for context.
Submitted by asante_acc· Apr 18, 2026Building and implementing CI/CD pipelines for a service
Question
Your application services run in Google Kubernetes Engine (GKE). You want to make sure that only images from your centrally-managed Google Container Registry (GCR) image registry in the altostrat-images project can be deployed to the cluster while minimizing development time. What should you do?
Options
- ACreate a custom builder for Cloud Build that will only push images to gcr.io/altostrat-images.
- BUse a Binary Authorization policy that includes the whitelist name pattern gcr.io/altostrat-images/.
- CAdd logic to the deployment pipeline to check that all manifests contain only images from
- DAdd a tag to each image in gcr.io/altostrat-images and check that this tag is present when the
Unlock PROFESSIONAL-CLOUD-DEVOPS-ENGINEER to see the answer
You've previewed enough free PROFESSIONAL-CLOUD-DEVOPS-ENGINEER questions. Unlock PROFESSIONAL-CLOUD-DEVOPS-ENGINEER for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#GKE#Binary Authorization#Container Security#Deployment Policy