GCP Professional Cloud Architect Practice Question

A global e-commerce company runs dozens of containerized microservices on GKE and Cloud Run in two regions. Architects must design a fully managed CI/CD pipeline that will: build and unit-test source code, store container images in a private multi-region repository with built-in vulnerability scanning, and roll out new versions using canary or blue/green releases across both runtimes. Which combination of Google Cloud services best satisfies all requirements?

Cloud Build with Container Registry for image storage and Traffic Director to shift traffic between versions
Cloud Build to run builds, Cloud Storage buckets for image storage, and Cloud Scheduler to trigger deployments
Cloud Build for builds and tests, Artifact Registry for image storage and scanning, and Cloud Deploy for progressive releases
Jenkins running on Compute Engine virtual machines, Container Registry for image storage, and custom scripts for deployments

Report Issue

Answer Description

Cloud Build provides managed builds and test execution without maintaining build servers. Artifact Registry offers private multi-region repositories for container images and supports native vulnerability scanning, meeting the security and distribution needs better than the legacy Container Registry. Cloud Deploy supplies a managed continuous delivery service that integrates with Cloud Build and Artifact Registry to orchestrate progressive release strategies such as canary or blue/green to GKE and Cloud Run. The other options either rely on legacy or self-managed components (Container Registry, Jenkins), lack built-in scanning, or do not manage progressive rollouts across both runtimes.

Ask Bash

Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.