nerdexam
Google

PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #351

Your organization uses a microservices architecture based on Google Kubernetes Engine (GKE). Recent security reviews recommend tighter controls around deployed container images to reduce potential…

The correct answer is B. Enforce Binary Authorization in your GKE clusters. Integrate container image vulnerability. Enforcing Binary Authorization in GKE ensures that only container images that pass predefined security policies, such as vulnerability scanning integrated into the CI/CD pipeline, are deployed. This managed service provides automated, policy-driven image validation, reducing…

Submitted by miguelv· Apr 18, 2026Ensuring compliance

Question

Your organization uses a microservices architecture based on Google Kubernetes Engine (GKE). Recent security reviews recommend tighter controls around deployed container images to reduce potential vulnerabilities and maintain compliance. You need to implement an automated system by using managed services to ensure that only approved container images are deployed to the GKE clusters. What should you do?

Options

  • ADevelop custom organization policies that restrict GKE cluster deployments to container images
  • BEnforce Binary Authorization in your GKE clusters. Integrate container image vulnerability
  • CAutomatically deploy new container images upon successful CI/CD builds by using Cloud Build
  • DBuild a system using third-party vulnerability databases and custom scripts to identify potential

How the community answered

(41 responses)
  • A
    2% (1)
  • B
    78% (32)
  • C
    5% (2)
  • D
    15% (6)

Explanation

Enforcing Binary Authorization in GKE ensures that only container images that pass predefined security policies, such as vulnerability scanning integrated into the CI/CD pipeline, are deployed. This managed service provides automated, policy-driven image validation, reducing risk and maintaining compliance effectively.

Topics

#Binary Authorization#GKE Security#Container Security#Deployment Policy

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice