Exam Professional Cloud Security Engineer topic 1 question 311 discussion

Actual exam question from Google's Professional Cloud Security Engineer

Question #: 311
Topic #: 1

[All Professional Cloud Security Engineer Questions]

Your organization is worried about recent news headlines regarding application vulnerabilities in production applications that have led to security breaches. You want to automatically scan your deployment pipeline for vulnerabilities and ensure only scanned and verified containers can run in the environment. What should you do?

A. Use Kubernetes role-based access control (RBAC) as the source of truth for cluster access by granting “container.clusters.get” to limited users. Restrict deployment access by allowing these users to generate a kubeconfig file containing the configuration access to the GKE cluster.
B. Use gcloud artifacts docker images describe LOCATION-docker.pkg.dev/PROJECT_ID/REPOSITORY/IMAGE_ID@sha256:HASH --show-package-vulnerability in your CI/CD pipeline, and trigger a pipeline failure for critical vulnerabilities.
C. Enforce the use of Cloud Code for development so users receive real-time security feedback on vulnerable libraries and dependencies before they check in their code.
D. Enable Binary Authorization and create attestations of scans.

Show Suggested Answer

Suggested Answer: D 🗳️

by abdelrahman89 at Oct. 25, 2024, 1:44 a.m.

Comments

Submit Cancel

BondleB

6 months ago

https://cloud.google.com/binary-authorization/docs/attestations D

upvoted 2 times

...

jmaquino

6 months ago

D: https://cloud.google.com/binary-authorization/docs/making-attestations?hl=es-419

upvoted 2 times

...

abdelrahman89

6 months, 1 week ago

Selected Answer: D

Answer D

upvoted 2 times

...

Exam Professional Cloud Security Engineer All Questions

View all questions & answers for the Professional Cloud Security Engineer exam

Exam Professional Cloud Security Engineer topic 1 question 311 discussion

Comments

BondleB

jmaquino

abdelrahman89

SY0-701