A Company Is Deploying a Container-Based Application Using AWS CodeBuild

question 553

Multiple Choice

A company is deploying a container-based application using AWS CodeBuild. The Security team mandates that all containers are scanned for vulnerabilities prior to deployment using a password-protected endpoint. All sensitive information must be stored securely. Which solution should be used to meet these requirements?

• A) Encrypt the password using AWS KMS. Store the encrypted password in the buildspec.yml file as an environment variable under the variables mapping. Reference the environment variable to initiate scanning.
• B) Import the password into an AWS CloudHSM key. Reference the CloudHSM key in the buildpec.yml file as an environment variable under the variables mapping. Reference the environment variable to initiate scanning.
• C) Store the password in the AWS Systems Manager Parameter Store as a secure string. Add the Parameter Store key to the buildspec.yml file as an environment variable under the parameter-store mapping. Reference the environment variable to initiate scanning.
• D) Use the AWS Encryption SDK to encrypt the password and embed in the buildspec.yml file as a variable under the secrets mapping. Attach a policy to CodeBuild to enable access to the required decryption key.

---

Definitions:

Golden-Collared Manakins

A species of bird known for the male's vibrant yellow throat plumage and their unique courtship dances.

Sexually Selected Ornaments

Physical traits evolved through sexual selection, often used to attract mates or compete with members of the same species, such as the colorful plumage of many birds.

Female Choice

A form of sexual selection where females choose their mates, often based on traits that indicate the male's genetic quality or fitness.

Cost of Sexual Reproduction

The energy and resources expended by organisms to produce offspring through sexual means, as opposed to asexual reproduction, which often incurs less cost.