Exam Professional Cloud DevOps Engineer topic 1 question 108 discussion

CD is the correct answer ,This will ensure that the image build is only triggered when a push is made to the main branch, and that the push is approved by the change control team. Explanation: Option C: Setting the repository event setting to ‘Push to a branch’ will trigger the Cloud Build job whenever a push is made to any branch in the repository. This is necessary because you want the image build to be triggered when a push is made to the main branch. Option D: Configuring a branch protection rule for the main branch on the repository will require that all pushes to the main branch be approved by the change control team. This is necessary to ensure that only approved changes are made to the main branch, which will then trigger the image build.

C) Triggers Only when pushing or merging into a branch in our case would be main branch D) Configuring branch protection, gives you the control over the branch and who can push to it, so any changes would need to be done over a pull request, and will need to be approved before merging.

To ensure that production image builds are run only against the main branch and require approval from the change control team, the recommended actions are to configure a trigger on the Cloud Build job with the repository event setting set to 'Push to a branch' (Option C) and to configure a branch protection rule for the main branch on the repository (Option D). Configuring the trigger for 'Push to a branch' ensures that Cloud Build is triggered specifically when changes are pushed to the main branch. Additionally, setting up a branch protection rule for the main branch adds an extra layer of control by enforcing policies such as requiring code reviews and approval from designated individuals or teams before changes are merged into the main branch. Together, these measures automate the image build process while adhering to the specified requirements and maintaining a robust change control workflow.

A push event to branches(including main) can then trigger an automated image build. Enabling branch protection will enforce a pull request, and it then involve ppl to review.

C is definetly the anaswer, I have slight confusion on D and E , Most probably will go with E since the questions says automated.

Answer should be CD.