AWS Certified CloudOps Engineer Associate SOA-C03 Practice Question

A company must deliver an updated, hardened Docker image for a Java microservice every month. The solution must automatically start from the latest public Amazon Corretto base image, install OS patches and application libraries, run functional tests, perform a vulnerability scan, and then push the approved image to an existing Amazon ECR repository. Operations wants an AWS-managed solution that requires the least ongoing maintenance. Which approach meets these requirements?

  • Use AWS App2Container to repackage the Java application and rely on Amazon ECS to pull the latest image at deployment time.

  • Configure a weekly Amazon EventBridge rule to trigger an AWS CodeBuild project that executes docker build and docker push commands and runs an open-source vulnerability scanner inside the buildspec.

  • Create an EC2 Image Builder container pipeline with a container recipe that extends the Amazon Corretto base image, adds the application layers and tests, sets the ECR repository as the distribution target, and enable Amazon Inspector scanning on the registry.

  • Run a Jenkins server on Amazon EC2 that executes a pipeline to build, test, scan, and push the image to ECR on a cron schedule.

AWS Certified CloudOps Engineer Associate SOA-C03
Deployment, Provisioning, and Automation
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot