Cloud Native Applications and CI/CD Pipelines GCPN Practice Questions (Page 10)

Questions 46–50

1. 46expert · hard

   A large enterprise is adopting Infrastructure as Code (IaC) to manage its cloud environment. The security team wants to enforce compliance policies across all teams, but the teams have different requirements for their environments. The team also wants to detect any unauthorized changes to the infrastructure. Which approach should be taken?

   • AImplement a centralized policy-as-code framework with team-specific policy sets and enable drift detection.
   • BAllow each team to define its own policies and rely on peer review.
   • CUse a single global policy for all teams and rely on manual audits.
   • DUse a configuration management tool to enforce policies at runtime only.
   Reveal Solution Discussion Select an answer first
2. 47foundation · easy

   What is the principle of least privilege in the context of CI/CD pipeline configuration?

   • AProviding every user with the same level of access
   • BUsing the most restrictive security group for all resources
   • CAllowing all users to modify pipeline definitions
   • DGranting the minimum permissions necessary for a task
   Reveal Solution Discussion Select an answer first
4. 48foundation · easy

   Which combination of components best describes the core architecture of a cloud native application?

   • AA monolithic application deployed on a single virtual machine
   • BMicroservices packaged as containers and orchestrated by a platform like Kubernetes
   • CA large database cluster with no application tier
   • DA serverless function that runs only on a specific cloud provider's proprietary runtime
   Reveal Solution Discussion Select an answer first
5. 49application · medium

   A startup is building its first CI/CD pipeline for a cloud-native application. The team wants to ensure that code changes are automatically tested and deployed to a staging environment before production. Which stage should be included in the pipeline?

   • AAutomated deployment to production without testing.
   • BAutomated testing and deployment to staging.
   • CManual code review and deployment to production.
   • DManual testing and deployment to production.
   Reveal Solution Discussion Select an answer first
6. 50application · medium

   A company is deploying a containerized application to production. The security team wants to ensure that container images are free of known vulnerabilities and are configured securely. Which action should be taken in the CI/CD pipeline?

   • AUse a minimal base image and manually review the Dockerfile.
   • BRun a container image scanner and fail the build if critical vulnerabilities are found.
   • CDeploy the image and monitor runtime behavior for anomalies.
   • DRun the container with root privileges to ensure functionality.
   Reveal Solution Discussion Select an answer first