Google Professional Cloud Developer
Get started today
Ultimate access to all questions.
Comments
Loading comments...
Ultimate access to all questions.
You manage an application deployed on GKE clusters across multiple environments, using Cloud Build for user acceptance testing (UAT). Cloud Build is integrated with Artifact Analysis, and the Binary Authorization API is enabled in all relevant Google Cloud projects. To ensure only container images that pass specific UAT tests are deployed to production, and given that an attestor is already created, what are the next steps you should take?
A
After the UAT phase, sign the attestation with a key stored as a Kubernetes secret. Add a GKE cluster-specific rule in Binary Authorization for the UAT Google Cloud project.
B
After the UAT phase, sign the attestation with a key stored as a Kubernetes secret. Add a GKE cluster-specific rule in Binary Authorization for the production Google Cloud project policy.
C
After the UAT phase, sign the attestation with a key stored in Cloud Key Management Service (KMS). Add a default rule in Binary Authorization for the UAT Google Cloud project.
D
After the UAT phase, sign the attestation with a key stored in Cloud Key Management Service (KMS). Add a GKE cluster-specific rule in Binary Authorization for the production Google Cloud project policy.