Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Google Professional Cloud DevOps Engineer Exam - Topic 1 Question 41 Discussion

Your application services run in Google Kubernetes Engine (GKE). You want to make sure that only images from your centrally-managed Google Container Registry (GCR) image registry in the altostrat-images project can be deployed to the cluster while minimizing development time. What should you do?
B) Use a Binary Authorization policy that includes the whitelist name pattern gcr.io/attostrat-images/.
A) Create a custom builder for Cloud Build that will only push images to gcr.io/altostrat-images.
C) Add logic to the deployment pipeline to check that all manifests contain only images from gcr.io/altostrat-images.
D) Add a tag to each image in gcr.io/altostrat-images and check that this tag is present when the image is deployed.

Google Professional Cloud DevOps Engineer Exam - Topic 1 Question 41 Discussion

Actual exam question for Google's Professional Cloud DevOps Engineer exam
Question #: 41
Topic #: 1
[All Professional Cloud DevOps Engineer Questions]

Your application services run in Google Kubernetes Engine (GKE). You want to make sure that only images from your centrally-managed Google Container Registry (GCR) image registry in the altostrat-images project can be deployed to the cluster while minimizing development time. What should you do?

Show Suggested Answer Hide Answer
Suggested Answer: B

by Louvenia at May 04, 2022, 02:43 AM

Limited Time Offer

25%

Off

Get Premium Professional Cloud DevOps Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Heike
10 months ago
A seems like overkill for this situation. Just use B!
upvoted 0 times
...
Lacresha
10 months ago
Definitely B! Whitelisting is essential for security.
upvoted 0 times
...
Dean
11 months ago
Wait, can you really enforce that with just a tag? Sounds risky.
upvoted 0 times
...
Mammie
11 months ago
I think C is better. More control in the pipeline!
upvoted 0 times
...
Vincent
11 months ago
Option B is the way to go! Binary Authorization is solid.
upvoted 0 times
...
Junita
11 months ago
I vaguely recall discussing tags in images, so option D might be a way to ensure compliance, but it feels a bit manual.
upvoted 0 times
...
Ammie
11 months ago
I feel like option C could work, but it seems like it might add extra steps to the pipeline.
upvoted 0 times
...
Lajuana
11 months ago
I'm not entirely sure, but I remember something about using a custom builder in Cloud Build. Is that option A?
upvoted 0 times
...
Lorean
11 months ago
I think option B sounds familiar, like something we covered in class about enforcing image policies.
upvoted 0 times
...
Xochitl
11 months ago
Okay, I think I've got this. The key is to find a way to support the team member and get them the skills they need. Option C, the training, seems like the most logical solution given the constraints.
upvoted 0 times
...
Golda
11 months ago
I'm a little confused by this question. What exactly is the "true value" that the measurement error is compared to? Is that the same as the mean or median? I'll have to review my notes to make sure I understand this concept.
upvoted 0 times
...
Florinda
11 months ago
This seems like a simple question, but I want to make sure I get it right. I know subject line and message content are things that can be tested, but I'm a little fuzzy on the other options. I'll have to review my notes to refresh my memory.
upvoted 0 times
...
Marleen
11 months ago
My study notes mentioned MySQL and PostgreSQL, but I think I might have overlooked SQL Server. Should I go for all three?
upvoted 0 times
...

Save Cancel