Correct Answer: Binary Authorization
Binary Authorization works by verifying 'attestations' (signatures) against a policy. If a container image doesn't have the required attestation from a trusted authority (like an a...
Correct Answer
Binary Authorization
Why This Answer Is Correct
Binary Authorization works by verifying 'attestations' (signatures) against a policy. If a container image doesn't have the required attestation from a trusted authority (like an approved build system), it's blocked from deployment.
This question evaluates your knowledge of Cloud Build — a core concept tested in Professional Cloud Architect. Understanding Cloud Build is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
You are designing a CI/CD pipeline. You need a service to compile source code, run tests, and produce software packages that are ready to deploy. Which service handles the build phase?
A DevOps team wants to ensure that all Docker images deployed to GKE clusters are scanned for vulnerabilities and that only images with 'Medium' or lower severity vulnerabilities are allowed to run. Which combination of tools is required?
You are implementing a CI/CD pipeline for a fleet of microservices. You want to ensure that only tested and approved container images are deployed to production. Which GCP service provides a centralized model for image governance and metadata?
An organization wants to run their CI/CD workloads in a way that minimizes infrastructure management and costs, only paying for the exact time the build step is running. Which service is best?
A DevOps team wants to automate the deployment of GKE workloads using a continuous delivery pipeline that supports Canary deployments and automatic rollbacks. Which service integrates these CD best practices natively?