Summer Sale Special Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: ac4s65

A company is implementing a CI/CD pipeline for containerized applications by using Amazon ECR.

Amazon Web Services SAP-C02 Full Course Access
Amazon Web Services SAP-C02 View All Questions

A company is implementing a CI/CD pipeline for containerized applications by using Amazon ECR. The company needs a solution that provides automated vulnerability scanning of all container images and the ability to prioritize remediation based on actual deployment status. The solution must scan repositories for operating system and programming language vulnerabilities. The solution must provide continuous monitoring as new Common Vulnerabilities and Exposures (CVEs) are discovered and integrate the findings into the company’s existing event-driven workflow.

Which solution will meet these requirements with the LEAST operational overhead?

A.

Turn on Amazon ECR basic scanning. Enable scan on push for all repositories. Configure Amazon EventBridge rules to capture scan completion events and route the findings to AWS Security Hub CSPM. Use ECR lifecycle policies to automatically delete images that have critical vulnerabilities.

B.

Create AWS Lambda functions that are invoked by ECR image push events. Configure the Lambda functions to pull images and scan the images by using open-source tools. Store the scan results in Amazon DynamoDB. Create Amazon CloudWatch dashboards to visualize vulnerability trends across repositories.

C.

Turn on Amazon ECR basic scanning and enhanced scanning. Configure manual scan triggers for basic scanning and enhanced scanning. Use AWS Systems Manager Parameter Store to maintain a list of approved base images. Create AWS Config rules to check that only approved images are deployed to production environments and automatically remediate non-compliant resources.

D.

Turn on Amazon ECR enhanced scanning. Integrate enhanced scanning with Amazon Inspector. Configure continuous scanning for repositories. Use Amazon Inspector to track the deployment status of container images. Configure Amazon EventBridge rules to capture Amazon Inspector findings and route the findings to the company’s existing event-driven workflow.

SAP-C02 PDF/Engine
  • Printable Format
  • Value of Money
  • 100% Pass Assurance
  • Verified Answers
  • Researched by Industry Experts
  • Based on Real Exams Scenarios
  • 100% Real Questions
buy now SAP-C02 pdf
Get 65% Discount on All Products, Use Coupon: "ac4s65"
Next
A company is migrating a document processing workload to AWS.
A solutions architect is reviewing an application ' s resilience before launch.
Previous