Q80 — AWS DOP-C02 Ch.1
Question 80 of 100 | ← Chapter 1
A company uses containers for its applications. It discovers that some container images lack required security configurations. A DevOps engineer must implement a solution to create a standardized base image. The solution must publish the base image weekly to the US West (Oregon), US East (N. Virginia), and EU (Frankfurt) Regions.
- A. Create an EC2 Image Builder pipeline using container recipes to build the image. Configure the pipeline to distribute the image to an Amazon Elastic Container Registry (Amazon ECR) repository in us-west-2. Configure ECR replication from us-west-2 to us-east-2, then from us-east-2 to eu-central-1. Schedule the pipeline to run weekly.
- B. Create an AWS CodePipeline pipeline using an AWS CodeBuild project to build the image. Use AWS CodeDeploy to publish the image to an Amazon ECR repository in us-west-2. Configure ECR replication from us-west-2 to us-east-2, then from us-east-2 to eu-central-1. Schedule the pipeline to run weekly.
- C. Create an EC2 Image Builder pipeline using container recipes to build the image. Configure the pipeline to distribute the image to Amazon ECR repositories in all three Regions. Schedule the pipeline to run weekly. ✓
- D. Create an AWS CodePipeline pipeline using an AWS CodeBuild project to build the image. Use AWS CodeDeploy to publish the image to Amazon ECR repositories in all three Regions. Schedule the pipeline to run weekly.
Correct Answer: C. Create an EC2 Image Builder pipeline using container recipes to build the image. Configure the pipeline to distribute the image to Amazon ECR repositories in all three Regions. Schedule the pipeline to run weekly.
Explanation
Option C is correct. EC2 Image Builder supports container image builds and natively publishes to multiple ECR repositories across Regions in a single pipeline execution—eliminating the need for manual or chained ECR replication (as in Options A and B). AWS CodeDeploy does not support container image deployment to ECR (making Options B and D invalid). Option C aligns with AWS best practices: it minimizes operational overhead, reduces latency and failure points associated with cross-Region replication, and satisfies the requirement for automated, weekly, multi-Region distribution using a purpose-built service.