Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Google Professional Cloud DevOps Engineer Exam - Topic 5 Question 17 Discussion

You are managing the production deployment to a set of Google Kubernetes Engine (GKE) clusters. You want to make sure only images which are successfully built by your trusted CI/CD pipeline are deployed to production. What should you do?
B) Enable Vulnerability Analysis on the Container Registry.
A) Enable Cloud Security Scanner on the clusters.
C) Set up the Kubernetes Engine clusters as private clusters.
D) Set up the Kubernetes Engine clusters with Binary Authorization.

Google Professional Cloud DevOps Engineer Exam - Topic 5 Question 17 Discussion

Actual exam question for Google's Professional Cloud DevOps Engineer exam
Question #: 17
Topic #: 5
[All Professional Cloud DevOps Engineer Questions]

You are managing the production deployment to a set of Google Kubernetes Engine (GKE) clusters. You want to make sure only images which are successfully built by your trusted CI/CD pipeline are deployed to production. What should you do?

Show Suggested Answer Hide Answer
Suggested Answer: B

by Lorrine at May 04, 2022, 07:29 AM

Limited Time Offer

25%

Off

Get Premium Professional Cloud DevOps Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Valentin
10 months ago
Definitely go with Binary Authorization for production safety!
upvoted 0 times
...
Horace
10 months ago
Private clusters help, but they don't solve the image trust issue.
upvoted 0 times
...
Sheron
11 months ago
Wait, can you really trust CI/CD pipelines completely?
upvoted 0 times
...
Mireya
11 months ago
I think enabling Vulnerability Analysis is also important.
upvoted 0 times
...
Sherell
11 months ago
Binary Authorization is the way to go for secure deployments!
upvoted 0 times
...
Hester
11 months ago
I practiced a similar question, and I think Cloud Security Scanner is more about scanning for vulnerabilities rather than controlling deployments.
upvoted 0 times
...
Rachael
11 months ago
I feel like private clusters could help with security, but I'm not convinced they directly address the image deployment issue.
upvoted 0 times
...
Oretha
11 months ago
I'm not entirely sure, but I remember something about enabling vulnerability analysis to ensure the images are safe before deployment.
upvoted 0 times
...
Ashanti
11 months ago
I think Binary Authorization might be the right choice here since it specifically controls which images can be deployed based on the CI/CD pipeline.
upvoted 0 times
...
Gilberto
11 months ago
Wait, I'm a little confused. I know Tanzu Kubernetes Grid is built on open source, but I can't quite remember all the specific projects off the top of my head. Let me take another look at the options and see if I can figure it out.
upvoted 0 times
...
Thea
11 months ago
Hmm, this is tricky. I'm not totally sure if the statement is correct or not. I'll read it over again carefully and then make my best guess on the answer.
upvoted 0 times
...
Derrick
11 months ago
Okay, I think I've got this. The key is using the CELLADMIN account and calling CELLCLI on all the cells. That should do the trick.
upvoted 0 times
...
Vi
11 months ago
I remember that the basis of the property usually includes acquisition costs, so I'm thinking I might need to add the cash payment and the title insurance together.
upvoted 0 times
...
Adolph
11 months ago
Hmm, I'm a little unsure about this. I know the Yellow Book has specific reporting requirements, but I can't remember if noteworthy accomplishments are one of them. I'll have to think this through carefully.
upvoted 0 times
...

Save Cancel