Google Professional Cloud DevOps Engineer Exam - Topic 5 Question 17 Discussion

Actual exam question for Google's Professional Cloud DevOps Engineer exam

Question #: 17
Topic #: 5

[All Professional Cloud DevOps Engineer Questions]

You are managing the production deployment to a set of Google Kubernetes Engine (GKE) clusters. You want to make sure only images which are successfully built by your trusted CI/CD pipeline are deployed to production. What should you do?

AEnable Cloud Security Scanner on the clusters.

BEnable Vulnerability Analysis on the Container Registry.

CSet up the Kubernetes Engine clusters as private clusters.

DSet up the Kubernetes Engine clusters with Binary Authorization.

Show Suggested Answer

Suggested Answer: B

by Lorrine at May 04, 2022, 07:29 AM

Limited Time Offer

25%

Off

Get Premium Professional Cloud DevOps Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Valentin

4 months ago

Definitely go with Binary Authorization for production safety!

upvoted 0 times

...

Horace

4 months ago

Private clusters help, but they don't solve the image trust issue.

upvoted 0 times

...

Sheron

4 months ago

Wait, can you really trust CI/CD pipelines completely?

upvoted 0 times

...

Mireya

4 months ago

I think enabling Vulnerability Analysis is also important.

upvoted 0 times

...

Sherell

5 months ago

Binary Authorization is the way to go for secure deployments!

upvoted 0 times

...

Hester

5 months ago

I practiced a similar question, and I think Cloud Security Scanner is more about scanning for vulnerabilities rather than controlling deployments.

upvoted 0 times

...

Rachael

5 months ago

I feel like private clusters could help with security, but I'm not convinced they directly address the image deployment issue.

upvoted 0 times

...

Oretha

5 months ago

I'm not entirely sure, but I remember something about enabling vulnerability analysis to ensure the images are safe before deployment.

upvoted 0 times

...

Ashanti

5 months ago

I think Binary Authorization might be the right choice here since it specifically controls which images can be deployed based on the CI/CD pipeline.

upvoted 0 times

...

Gilberto

5 months ago

Wait, I'm a little confused. I know Tanzu Kubernetes Grid is built on open source, but I can't quite remember all the specific projects off the top of my head. Let me take another look at the options and see if I can figure it out.

upvoted 0 times

...

Thea

5 months ago

Hmm, this is tricky. I'm not totally sure if the statement is correct or not. I'll read it over again carefully and then make my best guess on the answer.

upvoted 0 times

...

Derrick

5 months ago

Okay, I think I've got this. The key is using the CELLADMIN account and calling CELLCLI on all the cells. That should do the trick.

upvoted 0 times

...

Vi

5 months ago

I remember that the basis of the property usually includes acquisition costs, so I'm thinking I might need to add the cash payment and the title insurance together.

upvoted 0 times

...

Adolph

5 months ago

Hmm, I'm a little unsure about this. I know the Yellow Book has specific reporting requirements, but I can't remember if noteworthy accomplishments are one of them. I'll have to think this through carefully.

upvoted 0 times

...