DOP-C02 · Question #446
A company containerized its Java app and uses CodePipeline. They want to scan images in ECR for vulnerabilities and reject images with critical vulnerabilities in a manual approval stage. Which…
The correct answer is D. Enhanced scanning, EventBridge listens to Inspector scan findings, Lambda rejects manual. Amazon ECR enhanced scanning uses Amazon Inspector for vulnerability detection. EventBridge can capture Inspector scan findings. Lambda can process scan findings and reject manual approval if critical vulnerabilities exist. Options A and C use incorrect or less integrated…
Question
A company containerized its Java app and uses CodePipeline. They want to scan images in ECR for vulnerabilities and reject images with critical vulnerabilities in a manual approval stage. Which solution meets these?
Options
- ABasic scanning with EventBridge for Inspector findings and Lambda to reject manual approval if
- BEnhanced scanning, Lambda invokes Inspector for SBOM, exports to S3, Athena queries SBOM,
- CEnhanced scanning, EventBridge listens to Detective scan findings, Lambda rejects manual
- DEnhanced scanning, EventBridge listens to Inspector scan findings, Lambda rejects manual
How the community answered
(16 responses)- A6% (1)
- B19% (3)
- C6% (1)
- D69% (11)
Explanation
Amazon ECR enhanced scanning uses Amazon Inspector for vulnerability detection. EventBridge can capture Inspector scan findings. Lambda can process scan findings and reject manual approval if critical vulnerabilities exist. Options A and C use incorrect or less integrated services (basic scanning or Detective). Option B adds unnecessary complexity with SBOM and Athena.
Topics
Community Discussion
No community discussion yet for this question.