Google Professional Cloud DevOps Engineer
Get started today
Ultimate access to all questions.
Comments
Loading comments...
Ultimate access to all questions.
Your company operates in a highly regulated industry. The security team mandates that only approved container images can be deployed on Google Kubernetes Engine (GKE). You must implement a solution that complies with these security requirements while minimizing administrative effort. What is the best approach?
A
Configure Binary Authorization in your GKE clusters to enforce deploy-time security policies.
B
Grant the roles/artifactregistry.writer role to the Cloud Build service account. Confirm that no employee has Artifact Registry write permission.
C
Use Cloud Run to write and deploy a custom validator. Enable an Eventarc trigger to perform validations when new images are uploaded.
D
Configure Kritis to run in your GKE clusters to enforce deploy-time security policies.