Google Professional Cloud DevOps Engineer Question 70
Select 3Google Cloud PlatformYour organization is using Google Cloud Build to implement a CI/CD pipeline for deploying a containerized application to Google Kubernetes Engine (GKE). The team wants to achieve the following goals:
- Ensure that only trusted container images are deployed to the production environment.
- Automate the deployment process with minimal manual intervention.
- Validate the application through integration tests before deployment.
Which combination of actions should you take to meet these requirements?
- A
Use Binary Authorization to enforce trusted container image policies.
- B
Set up a Cloud Build pipeline to include a step for running integration tests.
- C
Manually verify each artifact in the container registry before deployment.
- D
Configure a Cloud Build trigger to automatically deploy to GKE when new images are pushed to the container registry.
- E
Use a custom script to deploy the application instead of Cloud Build.
Show answer and explanation
Correct answers: A, B, D
Explanation
To implement a CI/CD pipeline that meets the stated goals, you should use Binary Authorization to enforce trusted container image policies (goal 1), include integration tests in the Cloud Build pipeline to validate the application (goal 3), and automate deployments using a Cloud Build trigger (goal 2). Avoiding manual interventions or custom scripts ensures the pipeline remains automated, efficient, and aligned with best practices.
- A. Correct.
Using Binary Authorization ensures that only trusted container images meeting your policies can be deployed to GKE, which helps meet the first goal.
- B. Correct.
Including a step for running integration tests in the Cloud Build pipeline validates the application before deployment, addressing the third goal.
- C. Incorrect.
Manually verifying each artifact is error-prone and time-consuming, which contradicts the goal of automating the deployment process.
- D. Correct.
Configuring a Cloud Build trigger to automatically deploy to GKE ensures minimal manual intervention, addressing the second goal.
- E. Incorrect.
Using a custom script instead of Cloud Build would bypass the automated pipeline and make the process harder to maintain, failing to meet the goals.