Correct Answer: Artifact Registry + Binary Authorization
Binary Authorization can enforce policies that require images to be signed by trusted authorities or pass vulnerability scans (stored in Artifact/Container Registry) before deploym...
Correct Answer
Artifact Registry + Binary Authorization
Why This Answer Is Correct
Binary Authorization can enforce policies that require images to be signed by trusted authorities or pass vulnerability scans (stored in Artifact/Container Registry) before deployment.
This question evaluates your knowledge of Cloud Build — a core concept tested in Professional Cloud Architect. Understanding Cloud Build is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
You are designing a CI/CD pipeline. You need a service to compile source code, run tests, and produce software packages that are ready to deploy. Which service handles the build phase?
You are implementing a CI/CD pipeline for a fleet of microservices. You want to ensure that only tested and approved container images are deployed to production. Which GCP service provides a centralized model for image governance and metadata?
An organization wants to run their CI/CD workloads in a way that minimizes infrastructure management and costs, only paying for the exact time the build step is running. Which service is best?
A company wants to implement a standardized 'Software Supply Chain' security policy that requires all code to be built on Google-managed infrastructure, scanned for vulnerabilities, and then cryptographically signed before it can be deployed to GKE. Which service handles the 'signing and verification' part?
A DevOps team wants to automate the deployment of GKE workloads using a continuous delivery pipeline that supports Canary deployments and automatic rollbacks. Which service integrates these CD best practices natively?