Exam Professional Cloud DevOps Engineer topic 1 question 119 discussion

it seems that the question doesn't match the answers.

Maybe this is the correct question for them: As part of your company's initiative to shift left on security, the InfoSec team is asking all teams to implement guard rails on all the Google Kubernetes Engine (GKE) clusters to only allow the deployment of trusted and approved images. You need to determine how to satisfy the InfoSec team's goal of shifting left on security. What should you do? And the answer should be option C: Binary Authorization allows you to define and enforce policies that determine which container images can run in your GKE environment based on image signatures. By integrating Binary Authorization into your CI/CD pipeline, you can ensure that only trusted and approved images, with the correct attestations, are deployed to the GKE clusters.

As part of your company's initiative to shift left on security, the InfoSec team is asking all teams to implement guard rails on all the Google Kubernetes Engine (GKE) clusters to only allow the deployment of trusted and approved images. You need to determine how to satisfy the InfoSec team's goal of shifting left on security. What should you do?

Question 119 is a duplicate of question 118.

Maybe this is the correct question for them: As part of your company's initiative to shift left on security, the InfoSec team is asking all teams to implement guard rails on all the Google Kubernetes Engine (GKE) clusters to only allow the deployment of trusted and approved images. You need to determine how to satisfy the InfoSec team's goal of shifting left on security. What should you do?

It seems like questions doesnt match with the answers given

Agreed! The question implies availability: "all logs must be available for one year so that the client can import the logs into their logging service. You must minimize required code changes." However, the answers refer to security (IAM, vulnerabilities, binary authorization, etc.).