Google Professional Cloud Developer Question 102
Single answerGoogle Cloud PlatformYou are deploying a containerized application to Google Kubernetes Engine (GKE). To ensure the security of your application binaries and dependencies, you want to implement a solution that scans your container images for vulnerabilities before they are deployed. Which security mechanism should you use?
- A
Google Cloud Container Analysis
- B
IAM Policies
- C
Cloud Armor
- D
Cloud Logging
Show answer and explanation
Correct answer: A
Explanation
Google Cloud Container Analysis integrates with Artifact Registry and Container Registry to scan container images for vulnerabilities. It identifies issues in application binaries, dependencies, and manifests, ensuring that only secure images are deployed. This makes it the most suitable mechanism for securing containerized applications in GKE.
- A. Correct.
Google Cloud Container Analysis is the correct choice as it provides vulnerability scanning for container images stored in Artifact Registry or Container Registry, ensuring that application binaries and dependencies are secure before deployment.
- B. Incorrect.
IAM Policies are used for access control and permissions management but do not scan or secure application binaries and dependencies.
- C. Incorrect.
Cloud Armor provides DDoS protection and web application firewall capabilities but does not perform vulnerability scanning for application binaries or dependencies.
- D. Incorrect.
Cloud Logging is used for storing and analyzing logs but does not provide any functionality to scan or secure application binaries and dependencies.