nerdexam
Amazon

SCS-C02 · Question #7

An ecommerce company has a web application architecture that runs primarily on containers. The application containers are deployed on Amazon Elastic Container Service (Amazon ECS). The container image

The correct answer is A. Use Amazon Inspector. Create inclusion rules in Amazon ECR to match repositories that need to. Amazon Inspector supports the configuration of inclusion rules to select which ECR repositories https://aws.amazon.com/inspector/faqs/

Submitted by omar99· Mar 6, 2026Plan and implement identity governance

Question

An ecommerce company has a web application architecture that runs primarily on containers. The application containers are deployed on Amazon Elastic Container Service (Amazon ECS). The container images for the application are stored in Amazon Elastic Container Registry (Amazon ECR). The company's security team is performing an audit of components of the application architecture. The security team identifies issues with some container images that are stored in the container repositories. The security team wants to address these issues by implementing continual scanning and on- push scanning of the container images. The security team needs to implement a solution that makes any findings from these scans visible in a centralized dashboard. The security team plans to use the dashboard to view these findings along with other security-related findings that they intend to generate in the future. There are specific repositories that the security team needs to exclude from the scanning process. Which solution will meet these requirements?

Options

  • AUse Amazon Inspector. Create inclusion rules in Amazon ECR to match repositories that need to
  • BUse ECR basic scanning of container images. Create inclusion rules in Amazon ECR to match
  • CUse ECR basic scanning of container images. Create inclusion rules in Amazon ECR to match
  • DUse Amazon Inspector. Create inclusion rules in Amazon Inspector to match repositories that

How the community answered

(14 responses)
  • A
    71% (10)
  • B
    7% (1)
  • C
    7% (1)
  • D
    14% (2)

Explanation

Amazon Inspector supports the configuration of inclusion rules to select which ECR repositories https://aws.amazon.com/inspector/faqs/

Topics

#Amazon Inspector#ECR scanning#container vulnerability#continual scanning

Community Discussion

No community discussion yet for this question.

Full SCS-C02 Practice