How Many Questions Of DCA Actual Test

NEW QUESTION 1
What is used by the kernel to Isolate resources when running Docker containers?

• A. Namespaces
• B. Overlay networks
• C. Volumes
• D. Control groups (also know as cgroups)

Answer: D

NEW QUESTION 2
Which set of commands can identify the publishd port(s) for a container? (Choose 1.)

• A. 'docker port inspect', 'docker container inspect'
• B. 'docker container inspect', docker port'
• C. 'docker info','docker network inspect'
• D. 'docker network inspect','docker port'

Answer: B

NEW QUESTION 3
How do you configure Docker engine to use a registry that is not configured with TLS certificates from a trusted CA?

• A. Set IGNORE_TLS in the 'daemon.json' configuration file.
• B. Set and export the IGNORE_TLS environment variable on the command line
• C. Set INSECURE_REGISTRY in the '/etc/docker/default' configuration file
• D. Pass the '--insecure.-registry' flag to the daemon at run time

Answer: D

NEW QUESTION 4
What is the purpose of multi-stage builds?

• A. Better logical separation of Dockerfile instructions for better readability
• B. Optimizing images by copying artifacts selectively from previous stages
• C. Better caching when building Docker images
• D. Faster image builds by allowing parallel execution of Docker builds

Answer: B

NEW QUESTION 5
What is the difference between the ADD and COPY dockerfile instructions? (choosen 2)

• A. ADD supports compression format handling while COPY does not.
• B. COPY supports regular expression handling while ADD does not.
• C. COPY supports compression format handling while ADD does not.
• D. ADD support remote URL handling while COPY does not.
• E. ADD supports regular expression handling while COPY does not.

Answer: DE

NEW QUESTION 6
An application image runs in multiple environments, and each environment uses different certificates and ports, what is the best practice to deploy the containers?

• A. Create a Dockerfile for each environment, specifying ports and ENV variables for certificates.
• B. Create a Dockerfile for each environment, specifying ports and Docker secrets for certificates.
• C. Create images that contain the specific configuration for every environment.
• D. Create a config file for each environment.

Answer: D

NEW QUESTION 7
Wha is the purpose of Docker Content Trust?

• A. Signing and verification of image tags
• B. Enabling mutual TLS between the Docker client and server
• C. Docker registry TLS verification and encryption
• D. Indicating an image on Docker Hub is an official image

Answer: A

NEW QUESTION 8
A service 'wordpress' is running using a password string to connect to a non-Dockerized database service. The password string is passed into the 'wordpress' service as a Docker secret. Per security policy, the password on the database was changed. Identity the correct sequence of steps to rotate the secret from the old password to the new password.

• A. Create a new docker secret with the new passwor
• B. Trigger a rolling secret update by using the 'docker secret update' command
• C. Trigger an update to the service by using 'docker service update --secret=<new password>'
• D. Create a new docker secret with the new passwor
• E. Remove the existing service using 'docker service rm'. Start a new service with the new secret using "--secret=<new password>"
• F. Create a new docker secret with a new passwor
• G. Trigger a rolling update of the "wordpress" service, by using "--secret-rm" & "--secret-add" to remove the old secret and add the updated secret.

Answer: D

NEW QUESTION 9
After creating a new service named 'http', you notice that the new service is not registering as healthy. How do you view the list of historical tasks for that service by using the command line?

• A. 'docker inspect http'
• B. 'docker service inspect http'
• C. 'docker service ps http'
• D. 'docker ps http'

Answer: C

NEW QUESTION 10
The output of which command can be used to find the architecture and operating system an image is compatible with?

• A. docker image inspect --filter {{.Architecture}} {{.OS}} ' <image-id>
• B. docker image ls <image-id>
• C. docker image inspect --format {{.Architecture}} {{.OS}} ' <image-id>
• D. docker image info <image-id>

Answer: C

NEW QUESTION 11
What is one way of directly transferring a Docker Image from one Docker host in another?

• A. 'docker push' the image to the IP address of the target host.
• B. 'docker commit' to save the image outside of the Docker filesyste
• C. Then transfer the file over to the target host and 'docker start' to start the container again.
• D. There is no way of directly transferring Docker images between host
• E. A Docker Registry must be used ad an intermediary.
• F. 'docker save' the image to save it as TAR file and copy it over to the target hos
• G. Then use 'docker load' to un-TAR the image back as a Docker image.

Answer: D

NEW QUESTION 12
What is the recommended way to configure the daemon flags and environment variables for your Docker daemon in a platform independent way?

• A. Set the configuration options using the ENV variable
• B. Set the configuration options in '/etc/docker/daemon.json'
• C. Set the configuration DOCKER_OPTS in '/etc/default/docker'
• D. Using 'docker config' to set the configuration options.

Answer: B

NEW QUESTION 13
What service mode is used to deploy a single task of a service to each node?

• A. replicated
• B. spread
• C. universal
• D. distributed
• E. global

Answer: E

NEW QUESTION 14
When using the Docker client to push an image to a registry, what environment variable is used to instruct the client to perform signing of the image?

• A. DOCKER_CONTENT_TRUST=1
• B. DOCKER_IMAGE_SIGN=1
• C. DOCKER_PUSH_SIGN=1
• D. NOTARY_ENABLE=1Correct

Answer: A

NEW QUESTION 15
Which of the following constitutes a production-ready devicemapper configuration for the Docker engine?

• A. Create a volume group in devicemapper and utilize the '--dm.thinpooldev' Docker daemon option, specifying the volume group
• B. Format a partition with xfs and mount it at '/var/lib/docker'
• C. Utilize the '--storage-opt dm.directlvm_device' Docker daemon option, specifying a block device
• D. Nothing, devicemapper comes ready for production usage out of the box

Answer: C

Explanation:
Explanation

NEW QUESTION 16
What behavior is expected when a service is created with the following command: 'docker service create --publish 8000:80 nginx'

• A. All nodes in the cluster will listen on port 8080 and forward to port 80 in the container.
• B. Only a single node in the cluster will listen on port 8080 and forward to port 80 in the container.
• C. All nodes in the cluster will listen on port 80 and forward to port 8080 in the container.
• D. Only a single node in the cluster will listen on port 80 and forward to port 8080 in the container.

Answer: A

NEW QUESTION 17
Which of the following commands wifi automatically create a volume when a container is started?

• A. 'docker container run --name nginxtest --volumes=/app nginx'
• B. 'docker container run --name nginxtest -v /app:mount nginx'
• C. 'docker container run --name nginxtest --volumes myvol:/app:new nginx'
• D. 'docker container run --name nginxtest -v myvol:/app nginx'

Answer: A

NEW QUESTION 18
Following the principle of least privilege, which of the following methods can be used to securely grnt access to the specific user to communicate to a Docker engine? (Choose two.)

• A. Utilize the '--host 0.0.0.0:2375' option to the Docker daemon to listen on port 2375 over TCP on all interfaces
• B. Utilize openssl to create TLS client and server certificates, configuring the Docker engine to use with mutual TLS over TCP.
• C. Utilize the '--host 127.0.0.1:2375' option to the Docker daemon to listen on port 2375 over TCP on localhost
• D. Give the user root access to the server to allow them to run Docker commands as root.
• E. Add the user to the 'docker' group on the server or specify the grouè with the '--group' Docker daemon option.

Answer: BE

NEW QUESTION 19
Which of the following are types of namespaces used by Docker to provide isolation? (Choose 2.)

• A. Host
• B. Network
• C. Process ID
• D. Authentication
• E. Storage

Answer: BC

NEW QUESTION 20
A docker service 'web' is running with a scale factor of 1 (replicas = 1). Bob intends to use the command 'docker service update --replicas=3 web'. Alice intends to use the command 'docker service scale web=3'.
How do the outcomes oft these two commands differ?

• A. Bob's command results in an erro
• B. Alice's command updates the number of replicas of the 'web' service to 3.
• C. Bob's command only updates the service definition, but no new replicas are starte
• D. Alice's command results in the actual scaling up of the 'web' service.
• E. Bob's command updates the number of replicas of the 'web' service to 3. Alice's command results in an error.
• F. Both Bob's and Alice's commands result in exactly the same outcome, which is 3 instances of the 'web' service.

Answer: D

NEW QUESTION 21
What is the purpose of a client bundle in the Universal Control Plane?

• A. Authenticate a user using client certificates to the Universal Control Plane
• B. Provide a new user instructions for how to login to the Universal Control Plane
• C. Provide a user with a Docker client binary compatible with the Universal Control Plane
• D. Group multiple users in a team in the Universal Control Plane

Answer: A

NEW QUESTION 22
Which one of the following commands will show a list of volumes for a specific container?

• A. 'docker container logs nginx --volumes'
• B. 'docker container inspect nginx'
• C. 'docker volume inspect nginx'
• D. 'docker volume logs nginx --containers'

Answer: B

NEW QUESTION 23
......