Exam Professional Cloud Developer topic 1 question 342 discussion

Actual exam question from Google's Professional Cloud Developer

Question #: 342
Topic #: 1

[All Professional Cloud Developer Questions]

You are responsible for improving the security of your Cloud Run services to protect these services against supply chain threats. You need to ensure that there are adequate security controls such as SLSA Level 3 builds for container images and non-falsifiable provenance for container images by using Google Cloud tools. What should you do?

A. Ask developers to build container images locally and ensure strict version controls by using Container Registry.
B. Use Cloud Build to build container images. Configure a Binary Authorization policy on the Cloud Run job.
C. Use Cloud Deploy to generate authenticated and non-falsifiable build provenance for container images.
D. Use Cloud Build to build container images. Use Cloud Scheduler to automate delivery of your applications to a series of target environments in a defined sequence.

Show Suggested Answer

Suggested Answer: B 🗳️

by Laureatul at May 6, 2025, 12:54 p.m.

Comments

Submit Cancel

Laureatul

1 month, 2 weeks ago

Selected Answer: C

Cloud Deploy is a fully managed deployment service that is tightly integrated with SLSA (Supply Chain Levels for Software Artifacts) and provides the necessary features for authenticated and non-falsifiable provenance. This is a critical requirement for securing your build process and meeting SLSA Level 3.

upvoted 1 times

...