nerdexam
AmazonAmazon

DOP-C02 · Question #357

DOP-C02 Question #357: Real Exam Question with Answer & Explanation

Sign in or unlock DOP-C02 to reveal the answer and full explanation for question #357. The question stem and answer options stay visible for context.

Submitted by deeparc· Mar 6, 2026Security & Compliance

Question

A company uses an HPC platform to run analysis jobs for data. The company uses AWS CodeBuild to create container images and store the images on Amazon Elastic Container Registry (Amazon ECR). The images are then deployed on Amazon Elastic Kubernetes Service (Amazon EKS). To maintain compliance, the company needs to ensure that the images are signed before the images are deployed on Amazon EKS. The signing keys must be rotated periodically and must be managed automatically. The company needs to track who generates the signatures. Which solution will meet these requirements with the LEAST operational effort?

Options

  • AUse CodeBuild to retrieve the image that was previously pushed to Amazon ECR. Use AWS
  • BUse AWS Lambda to retrieve the image that was previously pushed to Amazon ECR. Use a
  • CUse AWS Lambda to retrieve the image that was previously pushed to Amazon ECR. Use AWS
  • DUse CodeBuild to build the image. Sign the image by using AWS Signer before pushing the

Unlock DOP-C02 to see the answer

You've previewed enough free DOP-C02 questions. Unlock DOP-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Container security#AWS Signer#CodeBuild#ECR#Image signing
Full DOP-C02 PracticeBrowse All DOP-C02 Questions