DOP-C02 · Question #401
A DevOps engineer is creating a CI/CD pipeline to build container images. The engineer needs to store container images in Amazon Elastic Container Registry (Amazon ECR) and scan the images for…
The correct answer is D. Create an ECR private repository in the private registry to store the container images. Enable. Use a single Amazon ECR private registry for both your own container images and your cached upstream images. In that private registry, enable basic image scanning to automatically scan pushed images for vulnerabilities. Also configure an ECR pull-through cache rule so that any…
Question
A DevOps engineer is creating a CI/CD pipeline to build container images. The engineer needs to store container images in Amazon Elastic Container Registry (Amazon ECR) and scan the images for common vulnerabilities. The CI/CD pipeline must be resilient to outages in upstream source container image repositories. Which solution will meet these requirements?
Options
- ACreate an ECR private repository in the private registry to store the container images and scan
- BCreate an ECR public repository in the public registry to cache images from upstream source
- CCreate an ECR public repository in the public registry. Configure a pull through cache rule for the
- DCreate an ECR private repository in the private registry to store the container images. Enable
How the community answered
(24 responses)- A4% (1)
- B13% (3)
- C4% (1)
- D79% (19)
Explanation
Use a single Amazon ECR private registry for both your own container images and your cached upstream images. In that private registry, enable basic image scanning to automatically scan pushed images for vulnerabilities. Also configure an ECR pull-through cache rule so that any images your builds pull from public repositories are cached in your private registry, keeping your pipeline resilient against upstream outages.
Topics
Community Discussion
No community discussion yet for this question.