Professional Cloud ArchitectDemo

By Google · Question Mode

QuestionQ216

Designing for security and compliance

Your company is developing containerized applications as part of its CI/CD pipeline. To enhance the security and maintainability of the build process, you need to:

  • Identify potential vulnerabilities in your container images.
  • Generate verifiable metadata about builds for auditing and compliance.
  • Create a comprehensive inventory of your application’s dependencies.

What should you do?

  • A Use Cloud Build to build container images, and then trigger Artifact Analysis on images pushed to Artifact Registry.
  • B Use Cloud Build to build container images, trigger Binary Authorization, and use Cloud Asset Inventory for tracking and analysis.
  • C Use Cloud Build to build container images, push the images to Artifact Registry, and use Security Command Center for tracking and analysis.
  • D Use Cloud Build to build container images, trigger Binary Authorization, and use Security Command Center for tracking and analysis.
Explanation

Artifact Analysis scans container images in Artifact Registry for vulnerabilities and detects dependency and license metadata. It can generate an SBOM, which is a machine-readable inventory of an application’s packages and dependencies. Cloud Build can generate verifiable SLSA build provenance for container images stored in Artifact Registry, and Artifact Analysis stores the associated build metadata for audit and compliance use.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!