Exam Professional Cloud Developer topic 1 question 350 discussion

Actual exam question from Google's Professional Cloud Developer

Question #: 350
Topic #: 1

[All Professional Cloud Developer Questions]

You are a developer at a regulated financial company and are the lead of a risk calculation application that is running on Cloud Run. Binary Authorization for Cloud Run has been enabled as an organization policy, and there is one attestor. All applications in the company are attested. Each application's image is deployed as part of a CI/CD pipeline during a 1-hour change window at 11 PM local time. There is a new security issue that requires you to deploy a critical fix before the next change window. You have created a new image with the fix, and your manager has approved the image in an email message. What should you do?

A. Add the image to the exempt image patterns in the Binary Authorization policy.
B. Sign the image with your private key and ask the project admin to change the public key in the attestor.
C. Change the organization policy to temporarily disable Binary Authorization, and deploy the image.
D. Use the breakglass approach to deploy the image.

Show Suggested Answer

Suggested Answer: D 🗳️

by Pime13 at July 15, 2025, 7:54 p.m.

Comments

Submit Cancel

Pime13

4 weeks ago

Selected Answer: D

https://cloud.google.com/binary-authorization/docs/run/using-breakglass-cloud-runThis page shows you how to use breakglass to deploy or serve an image on Cloud Run when the image violates the Binary Authorization policy. Note: When you use breakglass to deploy an image, a breakglass event is automatically logged to Cloud Audit Logs, regardless of whether the deployment satisfies or violates the policy. You can use Cloud Audit Logs to view breakglass events and trigger other actions.

upvoted 1 times

...