DCA: Docker Certified Associate Practice Questions – First Edition Part 2

How should we give a user permission to interact with the Docker daemon on a machine without giving them unnecessary additional access?

Which approach is the most secure for a Docker client to authenticate with a registry that employs a self-signed certificate?

What would be the best way to start a new swarm cluster?

Sally wants to prevent Docker Swarm encryption keys from being stored insecurely on her swarm managers. How can she tackle enforcing a lock on the swarm cluster?

Which devicemapper mode should we use for a production environment?

In Kubernetes, Which of the following is needed in order to expand a PersistentVolumeClaim?

Which of the following commands would we use to view a container’s logs?

How would we go about keeping track of changes made to an image in source control (i.e., git)?

A Kubernetes Pod is using a PersistentVolumeClaim for storage. The Pod is deleted, along with the PersistentVolumeClaim. Which of the following configurations would allow the PersistentVolume to be re-used without manual intervention?

Which of the following commands will attach the tasks of a new service to an existing overlay network called my-overlay?

Which of the following is true of filesystem storage models? (Choose two)

What procedure should we follow to upgrade the Docker engine on an Ubuntu server?

Sara wants to run a container using the busybox image, and she wants to pass a custom command to the container: echo Docker is great!. Which of the following commands will accomplish this?

What tool should we use if we need to manage a multi-container application as a unit on a single Docker host?

What type of data exists in the writable file system layer created by a container?

How can we use multi-stage builds to generate small, efficient Docker images?

What would a container generated from the following Dockerfile’s runtime working directory be?
FROM alpine

WORKDIR /x
WORKDIR /y
WORKDIR z

CMD pwd

Which of the following statements about docker images is correct?

In the Universal Control Plane, we have a group of people who require comparable permissions (UCP). Instead of providing unique access to each person one by one, how can we manage their permissions as a group?

Which of the following commands can result in a new named volume being created?

What command will help us delete a service called my-service along with all of its tasks?

Which network driver connects containers directly to a network stack on the host machine without any isolation?

Which of the following statements about Docker image vulnerability scanning is accurate?

Which of the following statements about the none network driver is accurate?

We have some containerized software that needs to have a reference to the hostname of the node that the software is running on. Which of the following commands will let us pass the node hostname as an environment variable into each task in a service?

Some of Daniel’s nodes have labels on them that describe each node’s availability zone. He wants to run a service without the availability_zone=east label that can execute tasks on any node. What instruction should he issue?

How can we guarantee that every node gets the updated unlock-key for a docker swarm?

Which of the following statements concerning private Docker registries is accurate?

What accomplishes the CMD directive?

Which of the following claims about the WORKDIR directive is false?

How can we convert a multi-layered image that already exists into a single layer?

What Linux feature does Docker employ to restrict the amount of memory used by containers?

Nancy wants to use the foo image to run a container. She desires to publish port 3001 from the container to port 5050 on the host. Which of the subsequent commands will make this happen?

Which of the following statements most accurately sums up the process for backing up metadata from the Universal Control Plane (UCP)?

What distinguishes a worker from a manager in a Docker swarm?

A new Docker server has been put up by Bob. The overlay2 driver is the server’s default, but he prefers to use devicemapper. How could this modification be put into practice?

Amanda wants to use a Docker container to complete a one-time task. However, this task occasionally fails and needs to be redone. If it fails, Amanda does not want to manually restart it. Which command should she issue to guarantee that the container successfully completes the one-time job?

Which of the following is not included in a metadata backup of the Docker Trusted Registry (DTR)?

Which of the following allows users to confidently deploy images?

Which of the following commands can be used to add an image tag?