Binary Authorization for containers in GCP - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is Binary Authorization in Google Cloud?

Binary Authorization is a security feature that ensures only trusted container images are deployed on Google Kubernetes Engine by enforcing image signing and verification.

beginner

How does Binary Authorization verify container images before deployment?

It checks if the container image has a valid digital signature from a trusted authority before allowing deployment.

intermediate

What role do attestors play in Binary Authorization?

Attestors are trusted entities that sign container images to prove they passed security checks, enabling Binary Authorization to verify image trustworthiness.

beginner

Why is Binary Authorization important for container security?

It prevents untrusted or vulnerable container images from running in production, reducing risks of security breaches and ensuring compliance.

beginner

What happens if a container image fails Binary Authorization checks?

The deployment is blocked, and the container image is not allowed to run on the cluster until it passes the required signature verification.

What does Binary Authorization primarily enforce before deploying containers?

A Image signature verification

B Container resource limits

C Network policies

D User authentication

Binary Authorization ensures container images have valid signatures before deployment.

Who signs container images to prove they are trusted in Binary Authorization?

A Google Cloud support

B Cluster admins

C End users

D Attestors

Attestors are trusted entities that sign container images.

What happens if a container image is not signed or fails verification in Binary Authorization?

A Deployment proceeds with warnings

B Image is automatically signed

C Deployment is blocked

D Image is deleted

Unsigned or unverified images are blocked from deployment.

Binary Authorization is mainly used with which Google Cloud service?

A Google Kubernetes Engine (GKE)

B Cloud Storage

C BigQuery

D Cloud Functions

Binary Authorization is designed to secure container deployments on GKE.

Which of the following is NOT a benefit of Binary Authorization?

A Enforcing image signature policies

B Automatically scaling containers

C Preventing untrusted container deployments

D Improving compliance and security

Binary Authorization does not handle container scaling.

Explain how Binary Authorization helps secure container deployments in Google Cloud.

Think about how trust is established and enforced before containers run.

Describe the role of attestors in the Binary Authorization process.

Who confirms that a container image is safe to deploy?