PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #351
Your organization uses a microservices architecture based on Google Kubernetes Engine (GKE). Recent security reviews recommend tighter controls around deployed container images to reduce potential…
The correct answer is B. Enforce Binary Authorization in your GKE clusters. Integrate container image vulnerability. Enforcing Binary Authorization in GKE ensures that only container images that pass predefined security policies, such as vulnerability scanning integrated into the CI/CD pipeline, are deployed. This managed service provides automated, policy-driven image validation, reducing…
Question
Options
- ADevelop custom organization policies that restrict GKE cluster deployments to container images
- BEnforce Binary Authorization in your GKE clusters. Integrate container image vulnerability
- CAutomatically deploy new container images upon successful CI/CD builds by using Cloud Build
- DBuild a system using third-party vulnerability databases and custom scripts to identify potential
How the community answered
(41 responses)- A2% (1)
- B78% (32)
- C5% (2)
- D15% (6)
Explanation
Enforcing Binary Authorization in GKE ensures that only container images that pass predefined security policies, such as vulnerability scanning integrated into the CI/CD pipeline, are deployed. This managed service provides automated, policy-driven image validation, reducing risk and maintaining compliance effectively.
Topics
Community Discussion
No community discussion yet for this question.