Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Google Professional Cloud DevOps Engineer Exam - Topic 2 Question 104 Discussion

Actual exam question for Google's Professional Cloud DevOps Engineer exam
Question #: 104
Topic #: 2
[All Professional Cloud DevOps Engineer Questions]

Your company operates in a highly regulated domain. Your security team requires that only trusted container images can be deployed to Google Kubernetes Engine (GKE). You need to implement a solution that meets the requirements of the security team, while minimizing management overhead. What should you do?

Show Suggested Answer Hide Answer
Suggested Answer: D

by Ligia at Apr 10, 2026, 06:51 PM

Limited Time Offer

25%

Off

Get Premium Professional Cloud DevOps Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Marlon
18 days ago
A sounds risky, not sure about giving write permissions.
upvoted 0 times
...
Cortney
23 days ago
I think D is the best choice for enforcing security policies.
upvoted 0 times
...
Horace
1 month ago
I feel like using Cloud Run for a custom validator could add unnecessary complexity. It might be better to stick with a built-in solution like Binary Authorization.
upvoted 0 times
...
Janna
1 month ago
I practiced a similar question where we had to restrict image deployments. I think granting roles to the service account might not be enough for security.
upvoted 0 times
...
Junita
2 months ago
I’m not entirely sure, but I think Kritis is also a good option for enforcing policies. I just can’t recall if it’s as effective as Binary Authorization.
upvoted 0 times
...
Luis
2 months ago
I remember studying about Binary Authorization and how it helps enforce security policies at deployment time. It seems like a solid choice here.
upvoted 0 times
...

Save Cancel