Correct Answer: Binary Authorization (with continuous validation feature)
Binary Authorization allows for ongoing verification of a policy after deployment, helping ensure long-term security compliance even if an image was initially clean....
Correct Answer
Binary Authorization (with continuous validation feature)
Why This Answer Is Correct
Binary Authorization allows for ongoing verification of a policy after deployment, helping ensure long-term security compliance even if an image was initially clean.
This question evaluates your knowledge of Cloud Build — a core concept tested in Professional Cloud Architect. Understanding Cloud Build is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
You are designing a CI/CD pipeline. You need a service to compile source code, run tests, and produce software packages that are ready to deploy. Which service handles the build phase?
A DevOps team wants to ensure that all Docker images deployed to GKE clusters are scanned for vulnerabilities and that only images with 'Medium' or lower severity vulnerabilities are allowed to run. Which combination of tools is required?
You are implementing a CI/CD pipeline for a fleet of microservices. You want to ensure that only tested and approved container images are deployed to production. Which GCP service provides a centralized model for image governance and metadata?
An organization wants to run their CI/CD workloads in a way that minimizes infrastructure management and costs, only paying for the exact time the build step is running. Which service is best?
A company wants to implement a standardized 'Software Supply Chain' security policy that requires all code to be built on Google-managed infrastructure, scanned for vulnerabilities, and then cryptographically signed before it can be deployed to GKE. Which service handles the 'signing and verification' part?