Container vulnerability scanning in GCP - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is container vulnerability scanning?

It is a process that checks container images for security weaknesses before they are used, helping to keep applications safe.

beginner

Which Google Cloud service provides container vulnerability scanning?

Google Cloud Container Analysis offers vulnerability scanning for container images stored in Container Registry or Artifact Registry.

intermediate

Why should you scan container images regularly?

Because new vulnerabilities are discovered often, scanning regularly helps catch and fix risks before they affect your applications.

intermediate

What happens if a vulnerability is found in a container image in GCP?

Container Analysis records the vulnerability details, and you can view reports to decide if you need to update or fix the image.

advanced

How can you automate container vulnerability scanning in Google Cloud?

By enabling the Container Analysis API and integrating it with your CI/CD pipeline, scans run automatically when images are pushed.

Which Google Cloud service scans container images for vulnerabilities?

A BigQuery

B Cloud Functions

C Cloud Storage

D Container Analysis

Container Analysis is the service designed to scan container images for security issues.

Where are container images scanned by Container Analysis typically stored?

A Cloud SQL

B Container Registry or Artifact Registry

C Cloud Pub/Sub

D Cloud Spanner

Container images are stored in Container Registry or Artifact Registry, where Container Analysis scans them.

What is a key benefit of scanning container images regularly?

A Reducing image size

B Faster image downloads

C Detecting new vulnerabilities early

D Increasing CPU usage

Regular scanning helps detect new vulnerabilities early to keep applications secure.

How can vulnerability scanning be integrated into development workflows?

A By enabling Container Analysis API in CI/CD pipelines

B By manually scanning images after deployment

C By disabling Container Registry

D By using Cloud Storage for scanning

Enabling Container Analysis API in CI/CD pipelines automates scanning during image builds.

What should you do if a vulnerability is found in a container image?

A Update or patch the image to fix the vulnerability

B Ignore it if the app works

C Delete the entire project

D Disable Container Analysis

Fixing vulnerabilities by updating or patching images keeps your applications safe.

Explain how Google Cloud Container Analysis helps secure container images.

Think about what happens when you upload a container image to Google Cloud.

Describe the steps to automate container vulnerability scanning in a CI/CD pipeline on Google Cloud.

Focus on how scanning fits into the build and deploy process.