Professional Cloud Developer · Free Practice Question Medium
Question 7
A build pipeline is being established by your team for an application that will operate within Google Kubernetes Engine (GKE). To ensure security, it is desired that only images created by the pipeline are deployed to the GKE cluster.
What is the recommended combination of Google Cloud services?
- A Google Cloud Deploy, Cloud Storage, and Google Cloud Armor
- B Google Cloud Deploy, Artifact Registry, and Google Cloud Armor
- C Cloud Build, Cloud Storage, and Binary Authorization
- D Cloud Build, Artifact Registry, and Binary Authorization
Reveal correct answer
Correct answer: B
Explanation
To ensure that only secure images are deployed to a GKE cluster, a combination of Google Cloud services can be used. Google Cloud Deploy can be used to automate the build and deployment process, ensuring that only approved images are sent to the cluster. Artifact Registry can be used to securely store container images and manage access controls to the images. Google Cloud Armor can be used to provide additional security measures by protecting the GKE cluster with a web application firewall, allowing only authorized traffic to reach the cluster. This combination of services ensures that the build pipeline is secure and the GKE cluster is protected from potential security threats.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
