Security Foundations Policy Controller Config Sync

Worked example. The correct answer is already marked and every option is explained below, so there is nothing to select here. To answer questions yourself, start the free trial.

An enterprise is adopting the Google Cloud Security Foundations blueprint to govern and secure its infrastructure across multiple environments. The DevOps and platform teams need to establish an automated, declarative GitOps workflow that continuously validates infrastructure definitions against compliance benchmarks, prevents configuration drift, and enforces security constraints before and during resource admission.

Which approach should the team implement to meet these governance and compliance requirements?

Implement Config Sync alongside Policy Controller with pre-built constraint templates and security bundles to continuously reconcile declarative configurations and enforce compliance policies.

Configure automated Google SecOps SOAR playbooks with domain-wide delegation to run scheduled rollbacks for any detected resource modifications.

Grant developers individual breakglass accounts with the Organization Administrator role to manually inspect and rectify non-compliant configurations in production.

Download service account JSON private keys to developer workstations and execute local verification shell scripts against the Cloud Resource Manager API prior to committing code.

Professional Cloud DevOps Engineer

Security Foundations Policy Controller Config Sync

Related questions