Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 295

Question

Your organization heavily utilizes serverless applications while prioritizing security best practices. You are responsible for enforcing image provenance and compliance with security standards before deployment. You leverage Cloud Build as your continuous integration and continuous deployment (CI/CD) tool for building container images. You must configure Binary Authorization to ensure that only images built by your Cloud Build pipeline are deployed and that the images pass security standard compliance checks. What should you do?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Create a Binary Authorization attestor that utilizes a scanner to evaluate container image build processes. Define a policy that requires deployment of images only if this attestation is present.

Google Cloud Professional Cloud Security Engineer PCSE — Question 295