Practice Test 4 | Google Cloud Certified Professional Cloud Architect | Dumps | Mock Test
For this question, refer to the EHR Healthcare case study.
EHR is carrying out automatic DevOps methodologies for the migration, maintenance and development of its apps.
Considering that it uses a hybrid environment and the applications are maintained by both internal and external international teams, its concern is to ensure that these processes take place in the safest way.
In particular, they are worried to preserve the integrity of systems and avoid weaknesses that could allow attacks or data leaks.
Development teams that use CI/CD methods have privileges according with the Least privilege and operate according to the principles of Zero Trust Security.
Which of these tools are the best for these requirements (choose 2)?
A. Cloud DLP
B. Forseti
C. Vulnerability scanning
D. Event Threat Detection
E. Binary Authorization
Correct answers: C and E
All the solutions indicated are useful for preserving and monitoring the security level of your environment.
The question was about CI / CD processes, so the relevant techniques are:
- Vulnerability Scanning works in container images submitted to Artifact Registry repositories. As soon as a reference, for example, is classified as unsafe, an alarm is raised.
- Binary authorization is a control for container images deployed on Google Kubernetes Engine (GKE); they must be signed by trusted authorities to ensure their sources.
- A It is wrong because DLP is and is related to data content and privacy and is not connected to software development and maintenance
- B It’s wrong because Forseti Security is a community-driven, open source security set of tools, unrelated to CI / CD
- D It is wrong because Event Threat Detection is part of the Security Command Center that reads the logs and, with ML techniques, detects possible threats and dangerous situations
For any further detail:
Comments are closed, but trackbacks and pingbacks are open.