GCP PCA · Question 30 · Technical Processes
A highly regulated financial institution uses GKE to run its applications. The security team mandates that only container images that have been scanned for vulnerabilities and explicitly signed by the QA team can be deployed to the production cluster. How should you enforce this policy?
Answer options:
Write a custom Kubernetes admission controller webhook to check image tags.
Use IAM to restrict who can push images to the Artifact Registry.
Implement Binary Authorization and configure an attestor for the QA team.
Configure Google Cloud Armor to block deployments of unsigned images.
50 questions · hints · full answers · grading
Expert