hardMultiple SelectObjective-mapped
PDE Practice Question: A company uses Cloud Build to deploy…
A company uses Cloud Build to deploy containerized applications. They want to ensure build and deployment quality. Which THREE steps should they include in their CI/CD pipeline? (Choose three.)
⚠ Common exam trap
Google often tests the misconception that unit tests can be run after deployment or that direct-to-production commits are acceptable in a quality-focused pipeline, when in fact both violate the principle of shifting left on quality and risk reduction.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Scan container images for vulnerabilities using Container Analysis.
Container Analysis (now part of Artifact Registry) scans container images for known vulnerabilities (CVEs) in OS packages and application dependencies. Integrating this scan into the CI/CD pipeline ensures that only compliant images proceed to deployment, preventing vulnerable code from reaching production. This directly supports the 'Ensuring solution quality' domain by enforcing security gates before release.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Scan container images for vulnerabilities using Container Analysis.
Why this is correct
Vulnerability scanning ensures images are secure before deployment.
- ✗
Run unit tests after deployment.
Why it's wrong here
Tests should be run before deployment to catch issues early.
- ✗
Deploy directly to production on every commit.
Why it's wrong here
Direct deployment bypasses staging and canary testing, increasing risk.
- ✓
Use canary deployments with gradual traffic shifting.
Why this is correct
Canary deployments limit blast radius and allow monitoring before full rollout.
- ✓
Pin base image digests in Dockerfile.
Why this is correct
Pinning digests ensures reproducible builds and prevents unwanted updates.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 890 original PDE practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PDE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PDE exam.