Google Cloud Professional Cloud Architect — Question 163

Your company is developing a web-based application. You need to make sure that production deployments are linked to source code commits and are fully auditable. What should you do?

Answer options

• A. Make sure a developer is tagging the code commit with the date and time of commit.
• B. Make sure a developer is adding a comment to the commit that links to the deployment.
• C. Make the container tag match the source code commit hash.
• D. Make sure the developer is tagging the commits with latest.

Correct answer: C

Explanation

The correct answer is C because linking the container tag directly to the source code commit hash provides a definitive and traceable relationship between the deployment and the exact code used. Options A and B do not create a direct link to the commit, making them less effective for audit purposes, while option D does not uniquely identify the specific commit, which compromises traceability.