Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 197

Question

You run applications on Cloud Run. You already enabled container analysis for vulnerability scanning. However, you are concerned about the lack of control on the applications that are deployed. You must ensure that only trusted container images are deployed on Cloud Run. What should you do? (Choose two.)

Accepted Answer

Correct answer: A, B. The correct answer is A, B. Option A: Enable Binary Authorization on the existing Cloud Run service. Option B: Set the organization policy constraint constraints/run.allowedBinaryAuthorizationPolicies to the list or allowed Binary Authorization policy names. Cloud Run runs stateless containers serverlessly and scales to zero, minimizing operational overhead. Organization Policy sets guardrails that constrain how resources can be configured across the org.

Google Cloud Professional Cloud Security Engineer PCSE — Question 197