Google Professional Cloud Developer Exam - Topic 3 Question 19 Discussion

Actual exam question for Google's Professional Cloud Developer exam

Question #: 19
Topic #: 3

[All Professional Cloud Developer Questions]

Your company's development teams want to use Cloud Build in their projects to build and push Docker images to Container Registry. The operations team requires all Docker images to be published to a centralized, securely managed Docker registry that the operations team manages.

What should you do?

AUse Container Registry to create a registry in each development team's project. Configure the Cloud Build build to push the Docker image to the project's registry. Grant the operations team access to each
development team's registry.

BCreate a separate project for the operations team that has Container Registry configured. Assign
appropriate permissions to the Cloud Build service account in each developer team's project to allow
access to the operation team's registry.

CCreate a separate project for the operations team that has Container Registry configured. Create a Service Account for each development team and assign the appropriate permissions to allow it access to the operations team's registry. Store the service account key file in the source code repository and use it to authenticate against the operations team's registry.

DCreate a separate project for the operations team that has the open source Docker Registry deployed on a Compute Engine virtual machine instance. Create a username and password for each development team.
Store the username and password in the source code repository and use it to authenticate against the
operations team's Docker registry.

Show Suggested Answer

Suggested Answer: A

https://cloud.google.com/container-registry/

by Tammara at May 03, 2022, 07:24 PM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Developer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Raylene

5 months ago

B gives the right balance of control and access.

upvoted 0 times

...

Colene

5 months ago

Surprised D is even an option, using a VM for this?

upvoted 0 times

...

Almeta

5 months ago

C sounds risky with storing keys in the repo.

upvoted 0 times

...

Alonso

5 months ago

I disagree, A is simpler and keeps things within each team's project.

upvoted 0 times

...

Rozella

5 months ago

Option B seems like the best choice for centralized management.

upvoted 0 times

...

Earnestine

5 months ago

I recall that using open source solutions can complicate things. Option D might not be the best practice since it involves storing credentials in the repo, which could lead to security issues.

upvoted 0 times

...

Leandro

5 months ago

I’m a bit confused about whether using a separate project for the operations team is necessary. Option A seems simpler, but I worry about managing multiple registries.

upvoted 0 times

...

Ethan

5 months ago

I think we practiced a similar question where we had to manage access to resources. Option C sounds familiar, but storing service account keys in the repo feels risky.

upvoted 0 times

...

Mona

5 months ago

I remember discussing the importance of centralized management for Docker images, so option B seems like a good choice, but I'm not entirely sure about the permissions setup.

upvoted 0 times

...

Mabel

6 months ago

Okay, let me think this through. The DS4246 shelf is a specific model, so the answer is likely one of the options given. I'll try to eliminate the options that don't seem plausible.

upvoted 0 times

...

Dell

6 months ago

Okay, I think I've got this. The development team clearly missed implementing sharing rules and field-level permissions. Options B and D look like the way to go here.

upvoted 0 times

...

An

6 months ago

I remember non-relational databases are more flexible, but I'm not sure if they're totally identical to relational storage.

upvoted 0 times

...