Pre-Winter Sale Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: force70

Google Certified Professional - Cloud Architect (GCP) Professional-Cloud-Architect Question # 33 Topic 4 Discussion

Google Certified Professional - Cloud Architect (GCP) Professional-Cloud-Architect Question # 33 Topic 4 Discussion

Professional-Cloud-Architect Exam Topic 4 Question 33 Discussion:
Question #: 33
Topic #: 4

You are a cloud architect for a financial services company that is building a new application on Google Kubernetes Engine (GKE). Currently, developers build container images on their workstations and manually push them to Artifact Registry. You need to design a secure CI/CD pipeline that automates the build and deployment process from your company ' s GitHub repository. The pipeline must ensure that only trusted, verified container images are deployed to the production GKE cluster and that every deployment can be traced back to its source code. What should you do?


A.

Connect your GitHub repository to Cloud Build, and create a trigger to automatically start builds on commits. Use the pipeline to build the container image, push it to Artifact Registry, and generate build provenance. Configure Binary Authorization with an attestor to require sign-off before deploying to the production GKE cluster using Cloud Deploy.


B.

Connect your GitHub repository to Cloud Build to create the container images and store them in Artifact Registry. Write a custom script that runs on a schedule to check for new image tags in Artifact Registry and deploys the latest image to the production GKE cluster.


C.

Create a Cloud Run function that triggers on changes to a Cloud Storage bucket where developers upload source code archives from GitHub. Have the function use Kaniko cache to build the image and push it to Artifact Registry. Use kubectl commands within the function to deploy the image to GKE.


D.

Use Jenkins on Compute Engine to build container images from the GitHub repository and push them to Artifact Registry. Promote images by adding tags in the registry. Use a service account key file stored in the Jenkins instance to grant deployment permissions to the production GKE cluster.


Get Premium Professional-Cloud-Architect Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.