nerdexam
AmazonAmazon

DOP-C02 · Question #203

DOP-C02 Question #203: Real Exam Question with Answer & Explanation

Sign in or unlock DOP-C02 to reveal the answer and full explanation for question #203. The question stem and answer options stay visible for context.

Submitted by thandi_sa· Mar 6, 2026Security and Compliance

Question

A company runs an application for multiple environments in a single AWS account. An AWS CodePipeline pipeline uses a development Amazon Elastic Container Service (Amazon ECS) cluster to test an image for the application from an Amazon Elastic Container Registry (Amazon ECR) repository. The pipeline promotes the image to a production ECS cluster. The company needs to move the production cluster into a separate AWS account in the same AWS Region. The production cluster must be able to download the images over a private connection. Which solution will meet these requirements?

Options

  • AUse Amazon ECR VPC endpoints and an Amazon S3 gateway endpoint. In the separate AWS
  • BSet a repository policy on the production ECR repository in the main AWS account. Configure the
  • CConfigure ECR private image replication in the main AWS account. Activate cross-account
  • DUse Amazon ECR VPC endpoints and an Amazon S3 gateway endpoint. Set a repository policy

Unlock DOP-C02 to see the answer

You've previewed enough free DOP-C02 questions. Unlock DOP-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#ECR cross-account access#VPC endpoints#repository policy#private networking#container images
Full DOP-C02 PracticeBrowse All DOP-C02 Questions