Why container registry matters in GCP - Challenge Your Understanding

Challenge - 5 Problems

🧠 Conceptual

intermediate

Why use a container registry in cloud infrastructure?

Imagine you have built a container image for your app. Why is it important to store it in a container registry when using cloud infrastructure?

A It provides a central place to store, manage, and secure container images for easy deployment.

B It automatically converts container images into virtual machines for cloud use.

C It replaces the need for any cloud storage services for your app data.

D It runs your container images directly without needing any orchestration tools.

💡 Hint

Think about how you share and reuse your container images across different environments.

A container registry acts like a library where container images are stored safely. This makes it easy to deploy the same image multiple times and manage versions securely.

❓ service_behavior

intermediate

What happens when you push a container image to Google Container Registry (GCR)?

When you push a container image to Google Container Registry, what is the expected behavior?

A The image is automatically deployed to all running Kubernetes clusters.

B The image is converted into a cloud function and executed immediately.

C The image is deleted after upload to save storage space.

D The image is uploaded, scanned for vulnerabilities, and stored securely for later deployment.

💡 Hint

Consider what a registry's role is after receiving an image.

Google Container Registry stores the image securely and can scan it for known security issues before you deploy it.

❓ Architecture

advanced

How does a container registry fit into a cloud deployment pipeline?

Which option best describes the role of a container registry in a cloud deployment pipeline?

A It directly manages cloud infrastructure resources like virtual machines and networks.

B It acts as a secure storage and version control point between building container images and deploying them to cloud services.

C It replaces the need for continuous integration tools by running tests on container images.

D It stores application logs and metrics for monitoring container performance.

💡 Hint

Think about the flow from building your app to running it in the cloud.

The container registry stores built images securely and manages versions, acting as a bridge between building and deploying containers.

❓ security

advanced

What security feature is commonly provided by container registries like Google Container Registry?

Which security feature helps protect container images stored in a container registry?

A Image vulnerability scanning to detect known security issues before deployment.

B Automatic encryption of running containers in Kubernetes clusters.

C Real-time intrusion detection on container runtime processes.

D Firewall rules that block all external access to container images.

💡 Hint

Focus on what happens to images before they are deployed.

Container registries scan images for vulnerabilities to help prevent deploying insecure containers.

✅ Best Practice

expert

What is a best practice when using container registries in multi-team cloud environments?

In a cloud environment with multiple teams, what is the best practice for managing container registry access?

A Allow all teams full access to all container images to simplify collaboration.

B Disable authentication on the registry to speed up image pulls.

C Use role-based access control (RBAC) to grant teams only the permissions they need for their images.

D Store all images in a single public repository to reduce management overhead.

💡 Hint

Think about how to keep images secure while allowing teams to work efficiently.

RBAC limits access to container images based on team roles, improving security and management.