Professional Cloud DeveloperDemo

By Google · Question Mode

QuestionQ356

Integrating applications with Google Cloud services

You are responsible for enhancing the security of your Cloud Run services to protect them from supply-chain threats. You need to ensure adequate security controls, including SLSA Level 3 builds for container images and non-falsifiable provenance for container images, using Google Cloud tools. What should you do?

  • A Ask developers to build container images locally and ensure strict version controls by using Container Registry.
  • B Use Cloud Build to build container images. Configure a Binary Authorization policy on the Cloud Run job.
  • C Use Cloud Deploy to generate authenticated and non-falsifiable build provenance for container images.
  • D Use Cloud Build to build container images. Use Cloud Scheduler to automate delivery of your applications to a series of target environments in a defined sequence.
Explanation

Cloud Build provides SLSA Level 3 build assurance for container images and generates authenticated, non-falsifiable build provenance. Binary Authorization can enforce a deployment policy for Cloud Run services and jobs, allowing only images that meet the required trust policy to be deployed.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!