Back to Amazon EC2 Container Registry

Amazon EC2 Container Registry (Amazon ECR)

5 minutes 5 Questions

Amazon EC2 Container Registry (Amazon ECR) is a fully managed Docker container registry that makes it easy for developers to store, manage, and deploy Docker container images. Amazon ECR eliminates the need to operate and scale the infrastructure required to power the container registry. It integra…

Test mode:
Start practice test
AWS Certified Solutions Architect - Amazon EC2 Container Registry (Amazon ECR) Example Questions

Test your knowledge of Amazon EC2 Container Registry (Amazon ECR)

Question 1

You are working on a project with a team of developers, and you want to ensure that every Amazon ECR repository has proper access controls. Which of the following practices is recommended?

Correct Answer: Use AWS Identity and Access Management (IAM) policies.

Using AWS IAM policies is the best practice for controlling access to Amazon ECR repositories. IAM policies allow you to specify fine-grained permissions based on user, group, or role. Other methods either do not specifically address access control or have security shortcomings.

Question 2

A project requirement states that the Docker images stored in your Amazon ECR repositories should be automatically scanned for security vulnerabilities. What should you do to achieve this?

Correct Answer: Enable Amazon ECR Image Scanning.

Amazon ECR has a built-in Image Scanning feature, which automatically scans Docker images for security vulnerabilities. Enabling Image Scanning complies with the project requirement. Other options either do not specifically address image scanning needs or would require manual intervention.

Question 3

Your company has multiple containerized applications running with the help of Amazon EC2 Container Registry (Amazon ECR). You need to identify the repositories that haven't been accessed in a long time to improve cost efficiency. What is the best method to achieve this?

Correct Answer: Use AWS Trusted Advisor to perform analysis and provide recommendations for Amazon ECR.

AWS Trusted Advisor is the best method to identify underutilized resources such as ECR repositories. It performs analysis, monitoring, and gives recommendations to improve resource usage and cost efficiency. Other methods either require manual intervention or do not directly address the problem.

More Amazon EC2 Container Registry (Amazon ECR) questions
16 questions (total)
Start 16 question test