ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 176 - Professional Cloud Developer discussion

Report
Export

You are deploying a microservices application to Google Kubernetes Engine (GKE). The application will receive daily updates. You expect to deploy a large number of distinct containers that will run on the Linux operating system (OS). You want to be alerted to any known OS vulnerabilities in the new containers. You want to follow Google-recommended best practices. What should you do?

A.
Use the gcloud CLI to call Container Analysis to scan new container images. Review the vulnerability results before each deployment.
Answers
A.
Use the gcloud CLI to call Container Analysis to scan new container images. Review the vulnerability results before each deployment.
B.
Enable Container Analysis, and upload new container images to Artifact Registry. Review the vulnerability results before each deployment.
Answers
B.
Enable Container Analysis, and upload new container images to Artifact Registry. Review the vulnerability results before each deployment.
C.
Enable Container Analysis, and upload new container images to Artifact Registry. Review the critical vulnerability results before each deployment.
Answers
C.
Enable Container Analysis, and upload new container images to Artifact Registry. Review the critical vulnerability results before each deployment.
D.
Use the Container Analysis REST API to call Container Analysis to scan new container images. Review the vulnerability results before each deployment.
Answers
D.
Use the Container Analysis REST API to call Container Analysis to scan new container images. Review the vulnerability results before each deployment.
Suggested answer: D

Explanation:

https://cloud.google.com/container-analysis/docs/automated-scanning-howto

https://cloud.google.com/container-analysis/docs/os-overview says: The Container Scanning API allows you to automate OS vulnerability detection, scanning each time you push an image to Container Registry or Artifact Registry. Enabling this API also triggers language package scans for Go and Java vulnerabilities (Preview).

asked 18/09/2024
Mir Ali
42 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first