AWS Certified DevOps Engineer - Professional DOP-C02

By Amazon · Question Mode

QuestionQ4

Monitoring and Logging

A company uses a continuous integration pipeline in which it builds container images with AWS CodeBuild. The generated images are stored in Amazon Elastic Container Registry (Amazon ECR).

Reviewing and remediating image vulnerabilities is taking the company too long. The company needs to rapidly identify image vulnerabilities and notify the security team about them.

Which combination of steps meets these requirements with the LEAST operational overhead?

Choose two
Explanation

Amazon ECR enhanced scanning integrates with Amazon Inspector to provide automated continuous scanning of container images. Amazon Inspector emits EventBridge events when image scan findings are created, updated, or closed. An EventBridge rule targeting an Amazon SNS topic can therefore notify the security team without maintaining custom Lambda code. Basic scanning supports only manual or scan-on-push frequencies, not continuous scanning.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!