Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 180

Question

Your organization develops software involved in many open source projects and is concerned about software supply chain threats. You need to deliver provenance for the build to demonstrate the software is untampered. What should you do?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: 1. Generate Supply Chain Levels for Software Artifacts (SLSA) level 3 assurance by using Cloud Build.2. View the build provenance in the Security insights side panel within the Google Cloud console. Cloud Build runs managed CI pipelines to build, test, and package code.

Google Cloud Professional Cloud Security Engineer PCSE — Question 180