Exam Professional Cloud DevOps Engineer topic 1 question 135 discussion

Choose Ooption A: Configure Binary Authorization in your GKE clusters to enforce deploy-time security policies. Binary Authorization allows you to define and enforce policies that determine which container images can be deployed based on image signatures. By configuring Binary Authorization, you can enforce deploy-time security policies, ensuring that only trusted and verified container images are allowed to run in your GKE clusters. This approach provides a robust security mechanism without requiring additional custom validators or complex configurations, minimizing management overhead while meeting the stringent security requirements of a highly regulated domain.

A is the answer.

using binary-authorization

https://cloud.google.com/binary-authorization/docs/overview