
Ultimate access to all questions.
For this question, refer to the EHR Healthcare case study. EHR Healthcare is moving their infrastructure to Google Cloud to support rapid growth, improve disaster recovery, and enable continuous deployment. Their software is currently hosted in multiple colocation facilities, using a mix of relational and NoSQL databases, with containerized applications running on Kubernetes clusters. They want to securely deploy workloads to Google Cloud and ensure that only verified containers are deployed using Google Cloud services. What should you do? (Choose two.)
A
Enable Binary Authorization on GKE, and sign containers as part of a CI/CD pipeline.
B
Configure Jenkins to utilize Kritis to cryptographically sign a container as part of a CI/CD pipeline.
C
Configure Container Registry to only allow trusted service accounts to create and deploy containers from the registry.
D
Configure Container Registry to use vulnerability scanning to confirm that there are no vulnerabilities before deploying the workload.