Topic 1 Question 37

AWS Certified Security - Specialty

Topic 1 Question 37
A company is running internal microservices on Amazon Elastic Container Service (Amazon ECS) with the Amazon EC2 launch type. The company is using Amazon Elastic Container Registry (Amazon ECR) private repositories. A security engineer needs to encrypt the private repositories by using AWS Key Management Service (AWS KMS). The security engineer also needs to analyze the container images for any common vulnerabilities and exposures (CVEs). Which solution will meet these requirements?
- Enable KMS encryption on the existing ECR repositories. Install Amazon Inspector Agent from the ECS container instances’ user data. Run an assessment with the CVE rules.
- Recreate the ECR repositories with KMS encryption and ECR scanning enabled. Analyze the scan report after the next push of images.
- Recreate the ECR repositories with KMS encryption and ECR scanning enabled. Install AWS Systems Manager Agent on the ECS container instances. Run an inventory report.
- Enable KMS encryption on the existing ECR repositories. Use AWS Trusted Advisor to check the ECS container instances and to verify the findings against a list of current CVEs.
ユーザの投票
コメント(6)
- 正解だと思う選択肢: B
  Answer B
  
  https://docs.aws.amazon.com/AmazonECR/latest/userguide/repository-create.html https://docs.aws.amazon.com/AmazonECR/latest/userguide/repository-edit.html
  
  👍 7
  100fold2024/04/19
- How about the CVE part of the question?
  
  👍 4
  Jonu2024/07/12
- 正解だと思う選択肢: B
  ECR repositories need to be recreated not enabled, with KMS encryption. The inventory for AWS system manager does not contain anything about vulnerability.
  
  👍 3
  Daniel762024/06/01
シャッフルモード

ユーザの投票

コメント(6)