Question 142 of 315
Single answerYour company has an application running as a Deployment in a Google Kubernetes Engine (GKE) cluster. You have separate clusters for development, staging, and production. You have discovered that the team is able to deploy a Docker image to the production cluster without first testing the deployment in development and then staging. You want to allow the team to have autonomy but want to prevent this from happening. You want a Google Cloud solution that can be implemented quickly with minimal effort. What should you do?
AConfigure a Kubernetes lifecycle hook to prevent the container from starting if it is not approved for usage in the given environment.
BImplement a corporate policy to prevent teams from deploying Docker images to an environment unless the Docker image was tested in an earlier environment.
✓CConfigure binary authorization policies for the development, staging, and production clusters. Create attestations as part of the continuous integration pipeline.
DCreate a Kubernetes admissions controller to prevent the container from starting if it is not approved for usage in the given environment.
✓
Correct Answer: C
Configure binary authorization policies for the development, staging, and production clusters. Create attestations as part of the continuous integration pipeline.
▥
Explanation
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of Google certification topics.