DOP-C02 · Question #337
A company is running an internal application in an Amazon Elastic Container Service (Amazon ECS) cluster on Amazon EC2. The ECS cluster instances can connect to the public internet. The ECS tasks that
Sign in or unlock DOP-C02 to reveal the answer and full explanation for question #337. The question stem and answer options stay visible for context.
Question
A company is running an internal application in an Amazon Elastic Container Service (Amazon ECS) cluster on Amazon EC2. The ECS cluster instances can connect to the public internet. The ECS tasks that run on the cluster instances are configured to use images from both private Amazon Elastic Container Registry (Amazon ECR) repositories and a public ECR registry repository. A new security policy requires the company to remove the ECS cluster's direct access to the internet. The company must remove any NAT gateways and internet gateways from the VPC that hosts the cluster. A DevOps engineer needs to ensure the ECS cluster can still download images from both the public ECR registry and the private ECR repositories. Images from the public ECR registry must remain up-to-date. New versions of the images must be available to the ECS cluster within 24 hours of publication. Which combination of steps will meet these requirements with the LEAST operational overhead? (Choose three.)
Options
- ACreate an AWS CodeBuild project and a new private ECR repository for each image that is
- BCreate a new Amazon ECR pull through cache rule for each image that is downloaded from the
- CCreate a new Amazon ECR pull through cache rule for the public ECR registry. Update each task
- DCreate an Amazon ECR interface VPC endpoint for the public ECR repositories that are in the
- ECreate an Amazon ECR interface VPC endpoint for the private ECR repositories that are in the
- FCreate an Amazon S3 gateway endpoint in the VPC.
Unlock DOP-C02 to see the answer
You've previewed enough free DOP-C02 questions. Unlock DOP-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.