Google Cloud Professional Cloud DevOps Engineer PCDOE — Topic 1 Question 210

Question

You have a CI/CD pipeline set up in Cloud Build that builds container images. These containers are stored in Artifact Registry. You need to ensure that only images built by the Cloud Build pipeline in your production project are deployed to your Google Kubernetes Engine (GKE) cluster. You want to minimize the amount of manual effort required for implementation and maintenance. What should you do?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Enable Binary Authorization on the GKE cluster. Configure the Binary Authorization policy to require the projects/PROJECT_ID/attestors/built-by-cloud-build attestor. Google Kubernetes Engine runs managed Kubernetes for containerized, portable workloads.

Google Cloud Professional Cloud DevOps Engineer PCDOE — Question 210