Examkin

Soru

Zorluk: ZorAWS Compute Services

A financial services organization is migrating a containerized application to AWS. The application requires custom kernel-level configurations and third-party security agents to be installed directly on the underlying host operating system for compliance auditing. The team wants to utilize container orchestration to manage the application but must retain full root access to the virtualization host. Which AWS compute option is the most appropriate to satisfy these requirements?

  1. Amazon Elastic Container Service (Amazon ECS) with the Amazon EC2 launch typeCevap
  2. B
    Amazon Elastic Container Service (Amazon ECS) with the AWS Fargate launch type
  3. C
    AWS Lambda packaged as a container image
  4. D
    Amazon Lightsail container service

Cevap

Amazon Elastic Container Service (Amazon ECS) with the Amazon EC2 launch type
The correct answer is the option indicating Amazon ECS with the Amazon EC2 launch type. This deployment model allows the customer to orchestrate containerized applications while retaining full administrative control, root access, and configuration capability over the underlying EC2 instances. This is necessary for installing custom security agents at the OS level and making kernel-level modifications.

Adım Adım Çözüm

1
Analyze the business and technical requirements of the workload.
The application is containerized, requires container orchestration, and must allow custom kernel-level OS modifications and host security agent installation.
This establishes the constraints: we need container management but must retain full control over the underlying operating system and virtualization host.
2
Evaluate AWS Fargate against the constraints.
Fargate is serverless container execution. Because AWS manages the underlying EC2 instances and OS, root access is unavailable.
This rules out AWS Fargate launch type.
3
Evaluate AWS Lambda and Amazon Lightsail against the constraints.
AWS Lambda abstracts all server management and has execution limits, while Amazon Lightsail container service does not allow host-level operating system configurations.
This rules out other serverless or simplified compute services.
4
Evaluate Amazon ECS with the Amazon EC2 launch type.
ECS with the EC2 launch type gives the user full administrative control over the EC2 instances in the ECS cluster, including operating system and kernel settings.
This option satisfies all container orchestration and compliance requirements.

Anahtar Kavram

Shared Responsibility Model application in managed vs. unmanaged AWS compute environments.
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

AWS Compute Services

Bu konudan daha fazla soru