PROFESSIONAL-CLOUD-SECURITY-ENGINEER Question #315: Real Exam Question with Answer & Explanation

Question

Your organization heavily utilizes serverless applications while prioritizing security best practices. You are responsible for enforcing image provenance and compliance with security standards before deployment. You leverage Cloud Build as your continuous integration and continuous deployment (CI/CD) tool for building container images. You must configure Binary Authorization to ensure that only images built by your Cloud Build pipeline are deployed and that the images pass security standard compliance checks. What should you do?

Options

• ACreate a Binary Authorization attestor that uses a scanner to assess source code management
• BCreate a Binary Authorization attestor that utilizes a scanner to evaluate container image build
• CCreate a Binary Authorization attestor that retrieves the Cloud Build build ID of the container
• DUtilize a custom Security Health Analytics module to create a policy. Enforce the policy through