Comprehensive and Detailed Explanation From Exact Extract:
SRE and modern DevOps best practices require that build artifacts—such as binaries, container images, and deployment packages—be stored in a secure, versioned artifact repository. These repositories ensure integrity, traceability, immutability, and security of deployment packages.
While the SRE Book does not use the ITIL term DML, it emphasizes:
“All production binaries should be stored in a secure, versioned repository to ensure consistent, repeatable, and trustworthy deployments.”
— Site Reliability Engineering Book, section on Release Engineering
The SRE Workbook expands on this principle by emphasizing signed and verified artifacts:
“To ensure safe rollout, artifacts must be built once, stored securely, signed, versioned, and deployed from a controlled artifact repository.”
Why the other options are incorrect:
A A CMS manages configuration, not deployment artifacts.
B Subversion is a source code repository, not an artifact repository.
C A DML is an ITIL concept, but SRE practice does not rely on it; instead, SRE uses modern artifact repositories (e.g., GCR, ACR, Artifactory).
Thus, the correct answer is D.
[References:, Site Reliability Engineering Book, “Release Engineering”, SRE Workbook, “Safe Deployments”, Google Cloud Build & Artifact Registry documentation, , ]
