AWS Certified Security - Specialty
Get started today
Ultimate access to all questions.
Comments
Loading comments...
Ultimate access to all questions.
An ecommerce company uses Amazon Elastic Container Service (Amazon ECS) for deploying application containers, with container images stored in Amazon Elastic Container Registry (Amazon ECR). During a security audit, the team identifies issues in certain container images. They aim to implement continuous and on-push scanning for these images, requiring a solution that centralizes scan findings in a dashboard, excluding specific repositories from scanning. Which solution meets these criteria?
A
Use Amazon Inspector. Create inclusion rules in Amazon ECR to match repositories that need to be scanned. Push Amazon Inspector findings to AWS Security Hub.
B
Use ECR basic scanning of container images. Create inclusion rules in Amazon ECR to match repositories that need to be scanned. Push findings to AWS Security Hub.
C
Use ECR basic scanning of container images. Create inclusion rules in Amazon ECR to match repositories that need to be scanned. Push findings to Amazon Inspector.
D
Use Amazon Inspector. Create inclusion rules in Amazon Inspector to match repositories that need to be scanned. Push Amazon Inspector findings to AWS Config.