AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 37

Question

A company is running internal microservices on Amazon Elastic Container Service (Amazon ECS) with the Amazon EC2 launch type. The company is using Amazon Elastic Container Registry (Amazon ECR) private repositories. A security engineer needs to encrypt the private repositories by using AWS Key Management Service (AWS KMS). The security engineer also needs to analyze the container images for any common vulnerabilities and exposures (CVEs). Which solution will meet these requirements?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Recreate the ECR repositories with KMS encryption and ECR scanning enabled. Analyze the scan report after the next push of images. AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest.

AWS Certified Security - Specialty SCS-C02 — Question 37