Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Amazon DOP-C02 Exam - Topic 5 Question 37 Discussion

Posted by Noel on Sep 13, 2024 at 08:13 PM

A company has deployed a new platform that runs on Amazon Elastic Kubernetes Service (Amazon EKS). The new platform hosts web applications that users frequently update. The application developers build the Docker images for the applications and deploy the Docker images manually to the platform.

The platform usage has increased to more than 500 users every day. Frequent updates, building the updated Docker images for the applications, and deploying the Docker images on the platform manually have all become difficult to manage.

The company needs to receive an Amazon Simple Notification Service (Amazon SNS) notification if Docker image scanning returns any HIGH or CRITICAL findings for operating system or programming language package vulnerabilities.

Which combination of steps will meet these requirements? (Select TWO.)

Suggested Answer: B, D

This corresponds to Option B: Create an AWS CodeCommit repository to store the Dockerfile and Kubernetes deployment files. Create a pipeline in AWS CodePipeline. Use an Amazon EventBridge event to invoke the pipeline when a newer version of the Dockerfile is committed. Add a step to the pipeline to initiate the AWS CodeBuild project.

* Step 2: Enabling Enhanced Scanning on Amazon ECR and Monitoring Vulnerabilities To scan for vulnerabilities in Docker images, Amazon ECR provides both basic and enhanced scanning options. Enhanced scanning offers deeper and more frequent scans, and integrates with Amazon EventBridge to send notifications based on findings.

Action: Turn on enhanced scanning for the Amazon ECR repository where the Docker images are stored. Use Amazon EventBridge to monitor image scan events and trigger an Amazon SNS notification if any HIGH or CRITICAL vulnerabilities are found.

Why: Enhanced scanning provides a detailed analysis of operating system and programming language package vulnerabilities, which can trigger notifications in real-time.

This corresponds to Option D: Create an AWS CodeBuild project that builds the Docker images and stores the Docker images in an Amazon Elastic Container Registry (Amazon ECR) repository. Turn on enhanced scanning for the ECR repository. Create an Amazon EventBridge rule that monitors ECR image scan events. Configure the EventBridge rule to send an event to an SNS topic when the finding-severity-counts parameter is more than 0 at a CRITICAL or HIGH level.

Get Premium DOP-C02 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
38 comments · newest first
GE
Gerardo 11 months ago
A little confused about the EventBridge choice in B vs. A.
MA
Matt 11 months ago
Totally agree with D, enhanced scanning is a must!
DA
Dannie 11 months ago
Wait, can ECR really handle that level of scanning?
HI
Hillary 11 months ago
I think B is better for triggering the pipeline.
OL
Olive 12 months ago
Option D seems solid for scanning and notifications.
TA
Talia 12 months ago
I recall that we need to ensure the Docker images are stored in ECR, but I'm not clear if we should use basic or enhanced scanning for the vulnerabilities.
SH
Shaunna 1 year ago
I feel like option D sounds right because it mentions enhanced scanning, but I'm a bit confused about how the EventBridge rule works with SNS notifications.
BL
Blair 1 year ago
I think we practiced a similar question where we had to set up notifications for vulnerabilities, and I believe using EventBridge with ECR scanning was part of the solution.
NA
Naomi 1 year ago
I remember we discussed using AWS CodePipeline to automate the deployment process, but I'm not sure if it should be triggered by S3 events or EventBridge.
LO
Louis 1 year ago
This seems straightforward enough. I think the key is to focus on automating the Docker image build and deployment process, and then setting up the vulnerability scanning and notification system. Options A and D look like they would work well together to meet all the requirements.
WH
Whitney 1 year ago
I'm a bit confused by the different options. Do I need to do both the CodePipeline setup and the ECR scanning, or can I just choose one? I want to make sure I select the most efficient and effective solution.
AR
Armando 1 year ago
Okay, I've got a plan. First, I'll set up the CodeCommit repository and CodePipeline to automate the Docker image build and deployment. Then, I'll add the enhanced scanning for the ECR repository and the EventBridge rule to send notifications for high or critical vulnerabilities. That should cover all the bases.
BE
Bettina 1 year ago
Hmm, this is a tricky one. There are a few different options presented, and I'm not sure which combination is the best. I'll need to carefully read through each step and think about how they address the requirements.
CH
Chantay 1 year ago
This question seems straightforward. I think I can approach it by focusing on the key requirements - automating the Docker image build and deployment process, and setting up notifications for vulnerabilities.
OR
Oretha 1 year ago
Hmm, I'm a bit unsure about this one. The question mentions the CRM can only be accessed on the corporate network, so I'm not sure if a proxy or VPN would be the best solution. I'll need to think this through carefully.
FL
Flo 2 years ago
The combination of CodeCommit, CodePipeline, and CodeBuild looks like a solid solution to address the requirements. Automating the entire process is the way to go.
LE
Lenita 2 years ago
↳ replying to Flo
The combination of CodeCommit, CodePipeline, and CodeBuild looks like a solid solution to address the requirements. Automating the entire process is the way to go.
SH
Shayne 2 years ago
↳ replying to Flo
E) Create an AWS CodeBuild project that scans the Dockerfile. Configure the project to build the Docker images and store the Docker images in an Amazon Elastic Container Registry (Amazon ECR) repository if the scan is successful. Configure an SNS topic to provide notification if the scan returns any vulnerabilities.
BR
Brynn 2 years ago
↳ replying to Flo
C) Create an AWS CodeBuild project that builds the Docker images and stores the Docker images in an Amazon Elastic Container Registry (Amazon ECR) repository. Turn on basic scanning for the ECR repository. Create an Amazon EventBridge rule that monitors Amazon GuardDuty events. Configure the EventBridge rule to send an event to an SNS topic when the finding-severity-counts parameter is more than 0 at a CRITICAL or HIGH level.
DE
Deonna 2 years ago
I prefer option C because it includes scanning for vulnerabilities and sending notifications through SNS.
DO
Dong 2 years ago
I agree with you, Carissa. Option A seems to address the challenge of manual deployment effectively.
CA
Carissa 2 years ago
I think option A is a good choice for automating the Docker image deployment process.
LO
Lovetta 2 years ago
Haha, I bet the developers are tired of manually building and deploying those Docker images. This automation is going to save them a lot of time and headaches.
CO
Corazon 2 years ago
↳ replying to Lovetta
A: Absolutely, it will save them a lot of time and effort in the long run.
KA
Kaycee 2 years ago
↳ replying to Lovetta
D: The automation will also ensure they get notified of any critical vulnerabilities in the Docker images.
RO
Rosendo 2 years ago
↳ replying to Lovetta
C: With over 500 users daily, manual updates would be a nightmare.
AM
Amalia 2 years ago
↳ replying to Lovetta
B: I agree, it's a smart move to use AWS CodePipeline for that.
SK
Skye 2 years ago
↳ replying to Lovetta
B: I agree, it's a smart move to use AWS CodePipeline for that.
PE
Pearlene 2 years ago
↳ replying to Lovetta
A: Yeah, automating the Docker image deployment process will definitely make their lives easier.
CL
Clarence 2 years ago
↳ replying to Lovetta
A: Yeah, automating the Docker image deployment process will definitely make their lives easier.
CH
Chaya 2 years ago
The enhanced scanning of Docker images in Amazon ECR and the EventBridge rule to trigger SNS notifications for critical or high vulnerabilities is a nice touch. This will help the team stay on top of security concerns.
DA
Daniela 2 years ago
I like the idea of automating the build and deployment of Docker images. This will definitely help the company manage the increased platform usage and frequent updates more efficiently.
MY
Myra 2 years ago
This looks like a great solution to streamline the Docker image deployment process. The use of AWS CodePipeline and EventBridge event triggers seems like a smart approach.
AN
Anglea 2 years ago
↳ replying to Myra
This looks like a great solution to streamline the Docker image deployment process. The use of AWS CodePipeline and EventBridge event triggers seems like a smart approach.
HI
Hillary 2 years ago
↳ replying to Myra
E) Create an AWS CodeBuild project that scans the Dockerfile. Configure the project to build the Docker images and store the Docker images in an Amazon Elastic Container Registry (Amazon ECR) repository if the scan is successful. Configure an SNS topic to provide notification if the scan returns any vulnerabilities.
CA
Carey 2 years ago
↳ replying to Myra
Which combination of steps will meet these requirements? (Select TWO.)
IL
Ilona 2 years ago
↳ replying to Myra
Which combination of steps will meet these requirements? (Select TWO.)
BE
Bethanie 2 years ago
↳ replying to Myra
C) Create an AWS CodeBuild project that builds the Docker images and stores the Docker images in an Amazon Elastic Container Registry (Amazon ECR) repository. Turn on basic scanning for the ECR repository. Create an Amazon EventBridge rule that monitors Amazon GuardDuty events. Configure the EventBridge rule to send an event to an SNS topic when the finding-severity-counts parameter is more than 0 at a CRITICAL or HIGH level.
0/2000 characters

Save Cancel