Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 331

Question

Your organization uses a microservices architecture based on Google Kubernetes Engine (GKE). Recent security reviews recommend tighter controls around deployed container images to reduce potential vulnerabilities and maintain compliance. You need to implement an automated system by using managed services to ensure that only approved container images are deployed to the GKE clusters. What should you do?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Enforce Binary Authorization in your GKE clusters. Integrate container image vulnerability scanning into the CI/CD pipeline and require vulnerability scan results to be used for Binary Authorization policy decisions. Google Kubernetes Engine runs managed Kubernetes for containerized, portable workloads.

Google Cloud Professional Cloud Security Engineer PCSE — Question 331