DOP-C02 · Question #447
DOP-C02 Question #447: Real Exam Question with Answer & Explanation
The correct answer is D: Create a private ECR repo, enable basic scanning, create a pull-through cache rule.. ECR pull-through cache caches images from upstream repositories for resilience. Private repo with basic scanning ensures vulnerability detection on pushed images. Enabling pull-through caching on a private repo combines caching and vulnerability scanning Public repos do not suppo
Question
A DevOps engineer needs a resilient CI/CD pipeline that builds container images, stores them in ECR, scans images for vulnerabilities, and is resilient to outages in upstream source image repositories. Which solution meets this?
Options
- ACreate a private ECR repo, scan images on push, replicate images from upstream repos with a
- BCreate a public ECR repo to cache images from upstream repos, create a private repo to store
- CCreate a public ECR repo, configure a pull-through cache rule, create a private repo to store
- DCreate a private ECR repo, enable basic scanning, create a pull-through cache rule.
Explanation
ECR pull-through cache caches images from upstream repositories for resilience. Private repo with basic scanning ensures vulnerability detection on pushed images. Enabling pull-through caching on a private repo combines caching and vulnerability scanning Public repos do not support pull-through caching of upstream images. Replication rules are for multi-Region replication, not upstream caching.
Topics
Community Discussion
No community discussion yet for this question.