Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 209

Question

Your organization is transitioning to Google Cloud. You want to ensure that only trusted container images are deployed on Google Kubernetes Engine (GKE) clusters in a project. The containers must be deployed from a centrally managed Container Registry and signed by a trusted authority. What should you do? (Choose two.)

Accepted Answer

Correct answer: C, E. The correct answer is C, E. Option C: Create a custom organization policy constraint to enforce Binary Authorization for Google Kubernetes Engine (GKE). Option E: Configure the Binary Authorization policy with respective attestations for the project. Google Kubernetes Engine runs managed Kubernetes for containerized, portable workloads. Google Kubernetes Engine runs managed Kubernetes for containerized workloads. Organization Policy sets guardrails that constrain how resources can be configured across the org.

Google Cloud Professional Cloud Security Engineer PCSE — Question 209