Google Professional Cloud Developer Question 256
Select 3Google Cloud PlatformYou are tasked with setting up a continuous integration (CI) pipeline for your application using Google Cloud services. The pipeline must build your application, store the resulting Docker image in a secure repository, and ensure that only tested and approved images are used for deployment. Which set of Google Cloud services would best fulfill these requirements?
- A
Cloud Build for building the application and Artifact Registry for storing Docker images
- B
Cloud Build for testing the application and Cloud Storage for storing deployment artifacts
- C
Artifact Registry for storing Docker images and Binary Authorization for enforcing image security policies
- D
Compute Engine for building the application and Artifact Registry for storing Docker images
- E
Cloud Build for building and testing the application, Artifact Registry for storing Docker images, and Binary Authorization for enforcing security policies
Show answer and explanation
Correct answers: A, C, E
Explanation
To develop a secure and efficient CI pipeline on Google Cloud, Cloud Build is used to build and test applications. Artifact Registry serves as a dedicated, secure storage solution for Docker images. Binary Authorization provides an additional layer of security by enforcing policies that ensure only verified and approved images are deployed. Combining these services implements a robust CI pipeline that meets both functional and security requirements.
- A. Correct.
This is correct because Cloud Build is used to build applications and Artifact Registry is a secure repository for storing Docker images.
- B. Incorrect.
This is incorrect because Cloud Storage is not specifically designed to store deployment artifacts like Docker images; Artifact Registry is more appropriate for this use case.
- C. Correct.
This is correct because Artifact Registry is used to store Docker images, and Binary Authorization can enforce security policies, ensuring only approved images are deployed.
- D. Incorrect.
This is incorrect because while Artifact Registry is suitable for storing Docker images, Compute Engine is not typically used for building applications in a CI pipeline. Cloud Build is the recommended service for building applications.
- E. Correct.
This is correct because Cloud Build can handle both building and testing the application, Artifact Registry provides a secure repository for Docker images, and Binary Authorization enforces security policies for deployment.