Google Exam Professional-Cloud-Architect Topic 10 Question 2 Discussion

Actual exam question for Google's Google Cloud Architect Professional exam

Question #: 2
Topic #: 10

[All Google Cloud Architect Professional Questions]

Your company has an application running on a deployment in a GKE cluster. You have a separate cluster for development, staging and production. You have discovered that the team is able to deploy a Docker image to the production cluster without first testing the deployment in development and then staging. You want to allow the team to have autonomy but want to prevent this from happening. You want a Google Cloud solution that can be implemented quickly with minimal effort. What should you do?

ACreate a Kubernetes admission controller to prevent the container from starting if it is not approved for usage in the given environment

BConfigure a Kubernetes lifecycle hook to prevent the container from starting if it is not approved for usage in the given environment

CImplement a corporate policy to prevent teams from deploying Docker image to an environment unless the Docker image was tested in an earlier environment

DConfigure the binary authorization policies for the development, staging and production clusters. Create attestations as part of the continuous integration pipeline''

Show Suggested Answer

Suggested Answer: D

https://cloud.google.com/architecture/prep-kubernetes-engine-for-prod#binary-authorization

The most common Binary Authorization use cases involve attestations. An attestation certifies that a specific image has completed a previous stage, as described previously. You configure the Binary Authorization policy to verify the attestation before allowing the image to be deployed. At deploy time, instead of redoing activities that were completed in earlier stages, Binary Authorization only needs to verify the attestation. https://cloud.google.com/binary-authorization/docs/overview

by Nickolas at May 06, 2022, 01:12 PM

Limited Time Offer

25%

Off

Get Premium Professional-Cloud-Architect Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!