Free Google Professional Cloud DevOps Actual Exam Questions - Question 5 Discussion
Question No. 5
[Building and implementing CI/CD pipelines for a service]
You are investigating issues in your production application that runs on Google Kubernetes Engine
(GKE). You determined that the source Of the issue is a recently updated container image, although
the exact change in code was not identified. The deployment is currently pointing to the latest tag.
You need to update your cluster to run a version of the container that functions as intended. What
should you do?
You are investigating issues in your production application that runs on Google Kubernetes Engine
(GKE). You determined that the source Of the issue is a recently updated container image, although
the exact change in code was not identified. The deployment is currently pointing to the latest tag.
You need to update your cluster to run a version of the container that functions as intended. What
should you do?
Select one option, then reveal solution.
US
SA
Shah A.
2026-02-19
Probably D here too. Using the exact sha256 digest means you’re locking in the precise image that worked before, avoiding any tag confusion. Tags like ‘latest’ can move around, so switching back to a tag (like in A or B) might not guarantee the same image. Building a new container from an old Git tag (C) could work, but it takes extra steps and might introduce build inconsistencies. Just pointing to the digest keeps it simple and reliable for rollback.
0
LR
Luke R.
2026-02-13
D, because using the digest guarantees the exact image without relying on tags.
0
JF
Jason F.
2026-01-27
D makes the most sense since latest tag is unstable and we need a known good image.
0
JF
Jason F.
2026-01-17
Option D, but does anyone else find the latest tag usage here super risky?
0