SAP-C02 · Question #740
A company is deploying a new application on AWS. The application consists of an Amazon Elastic Kubernetes Service (Amazon EKS) cluster and an Amazon Elastic Container Registry (Amazon ECR) repository.
The correct answer is B. Activate Amazon Inspector to scan the EKS nodes and the ECR repository.. You can use Amazon Inspector to check for unintended network accessibility of your nodes and for vulnerabilities on those Amazon EC2 instances. https://docs.aws.amazon.com/eks/latest/userguide/configuration-vulnerability-analysis.html
Question
A company is deploying a new application on AWS. The application consists of an Amazon Elastic Kubernetes Service (Amazon EKS) cluster and an Amazon Elastic Container Registry (Amazon ECR) repository. The EKS cluster has an AWS managed node group. The company's security guidelines state that all resources on AWS must be continuously scanned for security vulnerabilities. Which solution will meet this requirement with the LEAST operational overhead?
Options
- AActivate AWS Security Hub. Configure Security Hub to scan the EKS nodes and the ECR
- BActivate Amazon Inspector to scan the EKS nodes and the ECR repository.
- CLaunch a new Amazon EC2 instance and install a vulnerability scanning tool from AWS
- DInstall the Amazon CloudWatch agent on the EKS nodes. Configure the CloudWatch agent to
How the community answered
(39 responses)- A5% (2)
- B79% (31)
- C3% (1)
- D13% (5)
Explanation
You can use Amazon Inspector to check for unintended network accessibility of your nodes and for vulnerabilities on those Amazon EC2 instances. https://docs.aws.amazon.com/eks/latest/userguide/configuration-vulnerability-analysis.html
Community Discussion
No community discussion yet for this question.