PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #370
Your company is deploying a large number of containerized applications to GKE. The existing CI/CD pipeline uses Cloud Build to construct container images, transfers the images to Artifact Registry…
The correct answer is A. Configure a policy in Binary Authorization to use Artifact Analysis vulnerability scanning to only. Binary Authorization enforces deployment policies in GKE to ensure that only trusted and verified container images are deployed. By integrating Artifact Analysis vulnerability scanning with Binary Authorization, you can automatically validate images against corporate security…
Question
Options
- AConfigure a policy in Binary Authorization to use Artifact Analysis vulnerability scanning to only
- BEnable Artifact Analysis vulnerability scanning and regularly scan images in Artifact Registry.
- CImplement a custom script in the Cloud Build pipeline that uses a third-party vulnerability scanning
- DConfigure GKE to use only images from a specific, trusted Artifact Registry repository. Manually
How the community answered
(63 responses)- A71% (45)
- B14% (9)
- C10% (6)
- D5% (3)
Explanation
Binary Authorization enforces deployment policies in GKE to ensure that only trusted and verified container images are deployed. By integrating Artifact Analysis vulnerability scanning with Binary Authorization, you can automatically validate images against corporate security policies and vulnerability thresholds before deployment, ensuring secure, policy-compliant automation within the existing CI/CD pipeline.
Topics
Community Discussion
No community discussion yet for this question.