Binary Authorization for containers in GCP - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to enable Binary Authorization on a GKE cluster.

GCP

gcloud container clusters update my-cluster --[1]

Drag options to blanks, or click blank then click option'

Aenable-binauthz

Benable-binary-authorization

Cenable-binary-auth

Denable-authz

Attempts:

3 left

💡 Hint

Common Mistakes

Using incorrect or incomplete flag names.

Confusing Binary Authorization with other security features.

The correct flag to enable Binary Authorization on a GKE cluster is --enable-binary-authorization.

2fill in blank

medium

Complete the command to create a policy for Binary Authorization.

GCP

gcloud container binauthz policies create --[1]=my-policy

Drag options to blanks, or click blank then click option'

Apolicy

Bpolicy-name

Cid

Dname

Attempts:

3 left

💡 Hint

Common Mistakes

Using '--policy' or '--policy-name' which are invalid flags.

Omitting the policy name flag.

The correct flag to specify the policy name is --name.

3fill in blank

hard

Fix the error in the command to add an attestor to a policy.

GCP

gcloud container binauthz policies add-attestor --[1] my-policy --attestor=my-attestor

Drag options to blanks, or click blank then click option'

Aname

Bpolicy

Cpolicy-name

Dpolicy-id

Attempts:

3 left

💡 Hint

Common Mistakes

Using '--policy' or '--policy-name' which are invalid in this context.

Omitting the policy identifier flag.

The correct flag to specify the policy is --name when adding an attestor.

4fill in blank

hard

Fill both blanks to configure the attestor with an attestation authority note and description.

GCP

gcloud container binauthz attestors create my-attestor --[1]=projects/my-project/locations/global/attestationAuthorityNotes/my-note --[2]="My attestor description"

Drag options to blanks, or click blank then click option'

Aattestation-authority-note

Battestor-note

Cdescription

Dnote

Attempts:

3 left

💡 Hint

Common Mistakes

Using incorrect flag names like '--attestor-note' or '--note'.

Confusing description flag with attestor resource flag.

The flag --attestation-authority-note specifies the attestation authority note resource, and --description adds a description.

5fill in blank

hard

Fill all three blanks to create a policy that requires attestation and sets evaluation mode.

GCP

gcloud container binauthz policies create --[1]=my-policy --[2]=REQUIRE_ATTESTATION --[3]=PROJECT_SINGLETON_POLICY_ENFORCE

Drag options to blanks, or click blank then click option'

Aname

Bdefault-rule-action

Cglobal-policy-evaluation-mode

Devaluation-mode

Attempts:

3 left

💡 Hint

Common Mistakes

Using incorrect flag names for evaluation modes.

Mixing up evaluation mode flags.

The --name flag sets the policy name, --default-rule-action sets the mode for evaluation, and --global-policy-evaluation-mode enforces the policy globally.