Examkin

Soru

Zorluk: KolayVulnerability Scanning, Container Security, and Threat Detection

A cloud security architect needs to implement continuous container image security for an enterprise application. The requirement is to automatically inspect container images for known software vulnerabilities immediately after they are pushed to Google Artifact Registry. Which Google Cloud solution fulfills this requirement with minimal operational overhead?

  1. Enable automatic vulnerability scanning in Artifact Registry using Container Analysis.Cevap
  2. B
    Assign the Owner primitive IAM role to the CI/CD service account to perform vulnerability audits.
  3. C
    Configure a VPC Service Controls perimeter around the Artifact Registry repository to detect vulnerabilities.
  4. D
    Grant the Service Account Admin role to the deployment pipeline service account to trigger security scanning.

Cevap

Enable automatic vulnerability scanning in Artifact Registry using Container Analysis.
Enabling automatic vulnerability scanning in Artifact Registry leverages Container Analysis, which automatically scans container images for software vulnerabilities when they are uploaded. This provides continuous threat management with zero management overhead.

Adım Adım Çözüm

1
Identify the core requirement for automated vulnerability scanning upon pushing container images.
Recognize that a native Google Cloud container analysis tool is required.
The system must continuously and automatically scan images for CVEs without custom scripts or excessive administrative privileges.
2
Evaluate Google Cloud container security services integrated with Artifact Registry.
Select Container Analysis vulnerability scanning.
Container Analysis integrates natively with Artifact Registry to perform automated vulnerability scanning on pushed container images.

Anahtar Kavram

Automated Container Vulnerability Scanning in Google Cloud
Bu soruyu puanla

Konular

Vulnerability Scanning, Container Security, and Threat Detection

Bu konudan daha fazla soru