Google Professional Cloud Security Engineer
Get started today
Ultimate access to all questions.
Comments
Loading comments...
Ultimate access to all questions.
You want to enforce that only trusted container images can be deployed to Cloud Run. Your environment already has container vulnerability scanning enabled. Which two actions should you take?
A
Enable Binary Authorization on the existing Cloud Run service.
B
Set the organization policy constraint constraints/run.allowedBinaryAuthorizationPolicies to the list or allowed Binary Authorization policy names.
C
Enable Binary Authorization on the existing Kubernetes cluster.
D
Use Cloud Run breakglass to deploy an image that meets the Binary Authorization policy by default.
E
Set the organization policy constraint constraints/compute.trustedImageProjects to the list of projects that contain the trusted container images.