MENU
A company is using Google Kubernetes Engine (GKE) with container images of a mission-critical application The company wants to scan the images for known security issues and securely share the report with the security team without exposing them outside Google Cloud.
What should you do?
Suggested Answer: C
Get Premium Professional Cloud Security Engineer Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
'The service evaluates all changes and remote access attempts to detect runtime attacks in near-real time.' : https://cloud.google.com/security-command-center/docs/concepts-container-threat-detection-overview This has nothing to do with KNOWN security Vulns in images
37 comments · newest first
DE
Derrick
11 months ago
Wait, can we really trust open source tools for this?
AL
Aliza
11 months ago
Totally agree with A, it keeps everything within Google Cloud!
LY
Lyla
11 months ago
D seems risky, sharing reports from GitHub?
NO
Nobuko
11 months ago
I think C is more efficient with Artifact Registry.
TI
Tijuana
12 months ago
A is the best option for security!
KA
Katheryn
12 months ago
I feel like option D is not the best fit since it involves GitHub, and I don't recall us discussing that as a secure method for sharing reports.
RO
Rosio
1 year ago
I'm a bit confused about option B; uploading reports to public buckets seems risky. I don't think that's what we should do for sensitive data.
BE
Bernardo
1 year ago
I remember practicing a question about using Artifact Registry for vulnerability scanning, so option C might be the right choice here.
SU
Susana
1 year ago
I think option A sounds familiar because we talked about the Security Command Center in class, but I'm not sure if it covers sharing reports securely.
LI
Lindsey
1 year ago
Ah, this is a good one. I've worked with GKE and security scanning before, so I think I can provide a solid solution.
TA
Tarra
1 year ago
Okay, let me think this through step-by-step. I want to make sure I cover all the key requirements in my answer.
RE
Rex
1 year ago
Hmm, I'm a bit unsure about the different options here. I'll need to carefully read through each one to make sure I understand the nuances.
LE
Leslie
1 year ago
This seems like a straightforward question, I'm confident I can handle it.
MO
Moon
1 year ago
I'm a bit confused by the options, but I'll give it my best shot and try to eliminate the less relevant choices.
MA
Margot
1 year ago
Hmm, I'm a bit unsure about the difference between phased deployment and continuous deployment. I'll need to think that part through carefully.
GL
Glendora
1 year ago
Easy, the answer is C - Executive Management. They're the ones who set the tone for the organization, so they need to be on board with the security program from the start.
OD
Odette
2 years ago
I agree with Maynard, Option C is the way to go. Keeping everything within the Google Cloud ecosystem makes the most sense for this use case.
CR
Craig
2 years ago
Agreed. It's important to keep security measures within the same ecosystem.
KE
Keshia
2 years ago
I think so too. Using Artifact Registry for automatic scanning is a smart move.
TR
Tricia
2 years ago
Option C is definitely the best choice. It keeps everything secure within Google Cloud.
KA
Kati
2 years ago
Agreed, using Cloud Build to build and push images for automatic scanning is the way to go.
JA
Jacquelyne
2 years ago
I think enabling vulnerability scanning in the Artifact Registry is a smart move. It's all about security.
PR
Providencia
2 years ago
Option C is definitely the best choice. It keeps everything secure within Google Cloud.
AL
Alberto
2 years ago
Haha, getting a GitHub subscription just to download a security report? Option D is a bit overkill, don't you think?
WA
Wade
2 years ago
B: Definitely, I think Option A or C would be more efficient for scanning and sharing the report securely.
LA
Laura
2 years ago
A: Yeah, I agree. Option D seems like too much work for just sharing a security report.
TA
Tasia
2 years ago
I think enabling vulnerability scanning in the Artifact Registry settings and pushing images for automatic scanning is the way to go.
JE
Jenelle
2 years ago
I prefer using an open source tool in Cloud Build to scan the images and share the report link with the security department.
HE
Heike
2 years ago
I like how Option C integrates the security scanning directly into the build and deployment process. That way, you don't have to worry about additional steps to share the reports.
MA
Maynard
2 years ago
Option C seems to be the most comprehensive solution. Scanning the images in the Artifact Registry and viewing the reports right there is a clean and efficient approach.
ET
Ettie
2 years ago
Using Artifact Registry for vulnerability scanning and viewing the reports there is a smart move.
JE
Jerry
2 years ago
I agree, option C seems like the best choice for securely scanning and sharing the reports.
SH
Shantay
2 years ago
Definitely, it's important to have a streamlined solution for security scanning and reporting.
EL
Elin
2 years ago
I agree, using Artifact Registry for automatic scanning and viewing reports in one place simplifies the process.
KA
Kanisha
2 years ago
Option C seems to be the most comprehensive solution. Scanning the images in the Artifact Registry and viewing the reports right there is a clean and efficient approach.
KR
Kristofer
2 years ago
I agree with Winifred, upgrading all clusters to the latest GKE version is crucial for security.
WI
Winifred
2 years ago
I think we should enable Container Threat Detection in the Security Command Center Premium tier.