SAP-C02 · Question #87
A company is running a containerized application in the AWS Cloud. The application is running by using Amazon Elastic Container Service (Amazon ECS) on a set of Amazon EC2 instances. The EC2…
The correct answer is A. Configure scan on push on the repository. ECR scans supports only eventbridge. https://docs.aws.amazon.com/AmazonECR/latest/userguide/image-scanning.html#scanning-
Question
A company is running a containerized application in the AWS Cloud. The application is running by using Amazon Elastic Container Service (Amazon ECS) on a set of Amazon EC2 instances. The EC2 instances run in an Auto Scaling group. The company uses Amazon Elastic Container Registry (Amazon ECR) to store its container images. When a new image version is uploaded, the new image version receives a unique tag. The company needs a solution that inspects new image versions for common vulnerabilities and exposures. The solution must automatically delete new image tags that have Critical or High severity findings. The solution also must notify the development team when such a deletion occurs. Which solution meets these requirements?
Options
- AConfigure scan on push on the repository.
- BConfigure scan on push on the repository.
- CSchedule an AWS Lambda function to start a manual image scan every hour.
- DConfigure periodic image scan on the repository.
How the community answered
(53 responses)- A60% (32)
- B6% (3)
- C23% (12)
- D11% (6)
Explanation
ECR scans supports only eventbridge. https://docs.aws.amazon.com/AmazonECR/latest/userguide/image-scanning.html#scanning-
Community Discussion
No community discussion yet for this question.