Professional Cloud Developer · Free Practice Question Medium
Question 36
A microservices application is being deployed to Google Kubernetes Engine (GKE) with a high volume of distinct containers that will operate on the Linux operating system (OS). Daily updates are expected, and it is necessary to be informed of any known OS vulnerabilities in the new containers. Adherence to Google's recommended best practices is essential.
What actions are recommended?
- A Use the gcloud CLI to scan new container images with Container Analysis. Check vulnerability results prior to each deployment.
- B Use the Container Analysis REST API to scan new container images with Container Analysis. Check vulnerability results prior to each deployment.
- C Enable Container Analysis and upload fresh container images to Artifact Registry. Check vulnerability results prior to each deployment.
- D Enable Container Analysis and upload new container images to Artifact Registry. Check critical vulnerability results before each deployment.
Reveal correct answer
Correct answer: C
Explanation
The correct option is to enable Container Analysis and upload new container images to Artifact Registry. This option follows Google-recommended best practices for deploying a microservices application to GKE. Container Analysis provides vulnerability scanning for container images, which helps identify any known OS vulnerabilities in the new containers. Uploading the container images to Artifact Registry ensures that they are available for deployment to GKE. Reviewing the vulnerability results before each deployment ensures that any vulnerabilities are addressed before the containers are deployed. This approach helps ensure that the application is secure and follows best practices for deploying containerized applications on GKE.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
