Google Professional Cloud Developer Question 98
Select 3Google Cloud PlatformYou are developing a containerized application that will be deployed on Google Kubernetes Engine (GKE). To ensure the security of your application, you need to scan its container images, application dependencies, and manifests for vulnerabilities before deployment. Which Google Cloud features or services can you use to achieve this?
- A
Container Analysis
- B
Cloud Security Scanner
- C
Binary Authorization
- D
Cloud Build
- E
Cloud Armor
Show answer and explanation
Correct answers: A, C, D
Explanation
To secure your application binaries, dependencies, and manifests, you can use Container Analysis to scan for vulnerabilities, Binary Authorization to enforce deployment of trusted images, and Cloud Build to integrate security scans into the CI/CD pipeline. While Cloud Security Scanner and Cloud Armor are useful for other aspects of application security, they are not specifically designed for securing application binaries or dependencies in this scenario.
- A. Correct.
Container Analysis is a critical component of Google Cloud that scans container images for vulnerabilities and stores metadata about them. It is directly relevant for securing application binaries, dependencies, and manifests.
- B. Incorrect.
Cloud Security Scanner is designed to scan web applications for vulnerabilities but is not used for scanning container images, dependencies, or manifests.
- C. Correct.
Binary Authorization is a service that ensures only trusted container images are deployed to your Kubernetes clusters. It works in tandem with Container Analysis to enforce security policies.
- D. Correct.
Cloud Build can integrate with Container Analysis to scan container images during the build process, ensuring that vulnerabilities are detected early in the development lifecycle.
- E. Incorrect.
Cloud Armor is a tool for protecting applications from DDoS attacks and managing web application firewall rules. It is not related to scanning container images or application dependencies.