DOP-C02 · Question #272
A company runs its container workloads in AWS App Runner. A DevOps engineer manages the company's container repository in Amazon Elastic Container Registry (Amazon ECR). The DevOps engineer must…
The correct answer is A. Use EC2 Image Builder to create a container image pipeline. Use Amazon ECR as the target. Turn on enhanced scanning in the Amazon ECR repository settings. This enables Amazon Inspector to scan images for vulnerabilities.
Question
A company runs its container workloads in AWS App Runner. A DevOps engineer manages the company's container repository in Amazon Elastic Container Registry (Amazon ECR). The DevOps engineer must implement a solution that continuously monitors the container repository. The solution must create a new container image when the solution detects an operating system vulnerability or language package vulnerability. Which solution will meet these requirements?
Options
- AUse EC2 Image Builder to create a container image pipeline. Use Amazon ECR as the target
- BUse EC2 Image Builder to create a container image pipeline. Use Amazon ECR as the target
- CCreate an AWS CodeBuild project to create a container image. Use Amazon ECR as the target
- DCreate an AWS CodeBuild project to create a container image. Use Amazon ECR as the target
How the community answered
(37 responses)- A62% (23)
- B5% (2)
- C19% (7)
- D14% (5)
Explanation
Turn on enhanced scanning in the Amazon ECR repository settings. This enables Amazon Inspector to scan images for vulnerabilities.
Topics
Community Discussion
No community discussion yet for this question.