Cyber Monday 2024! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Google Exam Professional Cloud DevOps Engineer Topic 3 Question 63 Discussion

Actual exam question for Google's Professional Cloud DevOps Engineer exam
Question #: 63
Topic #: 3
[All Professional Cloud DevOps Engineer Questions]

Your company operates in a highly regulated domain. Your security team requires that only trusted container images can be deployed to Google Kubernetes Engine (GKE). You need to implement a solution that meets the requirements of the security team, while minimizing management overhead. What should you do?

Show Suggested Answer Hide Answer
Suggested Answer: D

by Talia at Mar 21, 2024, 11:06 PM

Limited Time Offer

25%

Off

Get Premium Professional Cloud DevOps Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Hoa
6 months ago
But with Binary Authorization, we can ensure only trusted container images are deployed.
upvoted 0 times
...
Callie
6 months ago
I'm not sure. Option C with Kritis also seems like a valid solution to enforce security policies.
upvoted 0 times
...
Chau
6 months ago
I agree with Hoa. Option D with Binary Authorization seems like the way to go.
upvoted 0 times
...
Hoa
7 months ago
I think option D sounds like a good choice. It enforces security policies at deploy time.
upvoted 0 times
...
My
7 months ago
I see your point, Josephine, but Binary Authorization directly enforces the policies at deploy-time, which may be more effective.
upvoted 0 times
...
Josephine
7 months ago
I'm not sure, wouldn't configuring Kritis in our GKE clusters also help enforce deploy-time security policies?
upvoted 0 times
...
Bernadine
7 months ago
I agree with My, Binary Authorization seems like the best way to ensure only trusted container images are deployed.
upvoted 0 times
...
My
7 months ago
I think we should go with option D), configure Binary Authorization in our GKE clusters.
upvoted 0 times
...
Hershel
8 months ago
Option C with Kritis is also an interesting option. It lets us define custom security policies and apply them to our deployments. But it might be a bit more complex to set up and maintain.
upvoted 0 times
...
Otis
8 months ago
Yeah, Binary Authorization seems like the most straightforward solution. We don't have to worry about managing additional services or permissions. It just handles the policy enforcement for us.
upvoted 0 times
...
Franchesca
8 months ago
Haha, yeah, the less we have to manage, the better. I'm all about that low-maintenance approach. Binary Authorization is sounding better and better.
upvoted 0 times
...
Kimberely
8 months ago
True, Kritis could be a bit more hands-on. Plus, I'm a little worried about the management overhead with a custom validator in Option B. Gotta keep that overhead to a minimum, you know?
upvoted 0 times
Kenda
8 months ago
C) Configure Kritis to run in your GKE clusters to enforce deploy-time security policies.
upvoted 0 times
...
Timothy
8 months ago
D) Configure Binary Authorization in your GKE clusters to enforce deploy-time security policies
upvoted 0 times
...
Tiera
8 months ago
A) Grant the roles/artifactregistry. writer role to the Cloud Build service account. Confirm that no employee has Artifact Registry write permission.
upvoted 0 times
...
Dean
8 months ago
D) Configure Binary Authorization in your GKE clusters to enforce deploy-time security policies
upvoted 0 times
...
...

Save Cancel