PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #266
PROFESSIONAL-CLOUD-SECURITY-ENGINEER Question #266: Real Exam Question with Answer & Explanation
Sign in or unlock PROFESSIONAL-CLOUD-SECURITY-ENGINEER to reveal the answer and full explanation for question #266. The question stem and answer options stay visible for context.
Question
Your organization relies heavily on Cloud Run for its containerized applications. You utilize Cloud Build for image creation, Artifact Registry for image storage, and Cloud Run for deployment. You must ensure that containers with vulnerabilities rated above a common vulnerability scoring system (CVSS) score of "medium" are not deployed to production. What should you do?
Options
- AImplement vulnerability scanning as part of the Cloud Build process. If any medium or higher
- BPerform manual vulnerability checks post-build, but before Cloud Run deployment. Implement a
- CConfigure Binary Authorization on Cloud Run to enforce image signatures. Create policies to
- DUtilize a vulnerability scanner during the Cloud Build stage and set Artifact Registry permissions
Unlock PROFESSIONAL-CLOUD-SECURITY-ENGINEER to see the answer
You've previewed enough free PROFESSIONAL-CLOUD-SECURITY-ENGINEER questions. Unlock PROFESSIONAL-CLOUD-SECURITY-ENGINEER for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.