Professional Cloud DevOps Engineer
Prepare and test your skills
Prepare and test your skills
Worked example. The correct answer is already marked and every option is explained below, so there is nothing to select here. To answer questions yourself, start the free trial.
Your enterprise organization needs to standardize and enforce the CLI toolchain (including the gcloud CLI, kubectl, and terraform) across hundreds of developer environments and automated deployment pipelines.
You must prevent toolchain version drift, ensure developers and CI systems only consume approved and security-vetted toolchain versions, and establish a repeatable mechanism to review and promote version updates safely.
Which strategy should you implement?
A centralized, private package repository (such as Google Cloud Artifact Registry) provides a controlled, single source of truth for hosting pre-approved, security-scanned toolchain artifacts, container images, and packages. Combining this with version pinning in configuration files guarantees that all developer workstations and automation pipelines execute against identical, validated binary versions of utilities like gcloud, kubectl, and terraform.
This architecture establishes a secure, centrally managed software supply chain. It isolates developers and CI/CD pipelines from upstream disruptions, enforces security validation before tools enter the organization, and provides an automated, auditable review process for ongoing maintenance.
Keep the momentum going with these hand-picked practice scenarios
Want more questions like this?
Get a free certification question every week.
StudyCerts
StudyCerts