Mirantis Mirantis Certifications DCA Questions & Answers

• Question 91:

  Is this the purpose of Docker Content Trust?

  Solution: Enable mutual TLS between the Docker client and server.

  A. Yes

  B. No

  Correct Answer: B

  Enabling mutual TLS between the Docker client and server is not the purpose of Docker Content Trust. According to the official documentation, the purpose of Docker Content Trust is to verify the integrity and publisher of all data received from a registry over any channel.

• Question 92:

  Which of the following is supported by control groups?

  A. Manage certificates

  B. Collect net

  C. Limit CPU usage within a container

  D. Isolate processes in a container

  Correct Answer: C

• Question 93:

  Two development teams in your organization use Kubernetes and want to deploy their applications while ensuring that Kubernetes-specific resources, such as secrets, are grouped together for each application.

  Is this a way to accomplish this?

  Solution: Create one namespace for each application and add all the resources to it.

  A. Yes

  B. No

  Correct Answer: A

  This is a way to accomplish this, because creating one namespace for each application and adding all the resources to it is a good practice for deploying applications in Kubernetes. According to the official documentation, namespaces are used to group resources into logical units that correspond to different projects, teams, or environments. Using namespaces can help avoid naming collisions and enforce resource quotas and access policies.

• Question 94:

  Will this Linux kernel facility limit a Docker container's access to host resources, such as CPU or memory? Solution: seccomp

  A. Yes

  B. No

  Correct Answer: B

  Using seccomp does not limit a Docker container's access to host resources, such as CPU or memory. Seccomp is a Linux kernel facility that allows filtering system calls made by a process. It can be used to enhance the security and isolation of a container by restricting its access to certain system calls. However, it does not affect the resource allocation or consumption of a container.

• Question 95:

  Your organization has a centralized logging solution, such as Splunk.

  Will this configure a Docker container to export container logs to the logging solution?

  Solution: docker system events --filter splunk

  A. Yes

  B. No

  Correct Answer: B

  This does not configure a Docker container to export container logs to the logging solution. The docker system events command shows information about real-time events in the Docker daemon. The --filter flag allows you to filter the output by various criteria, such as type, action, image, container, etc. However, splunk is not a valid filter value and will cause an error. To configure a Docker container to export container logs to the logging solution, you need to use the --log-driver and --log-opt flags when creating or running the container. These flags allow you to specify which logging driver and options to use for the container. For example, to use Splunk as the logging driver, you can use --log- driver splunk and provide the Splunk URL, token, and other options using --log-opt.

• Question 96:

  A users attempts to set the system time from inside a Docker container are unsuccessful. Could this be blocking this operation? Solution: inter-process communication

  A. Yes

  B. No

  Correct Answer: B

  Inter-process communication is not blocking this operation. Inter-process communication (IPC) is a mechanism that allows processes to communicate and synchronize their actions. IPC creates a set of interfaces for exchanging various types of data. Docker supports IPC namespaces to isolate IPC resources between processes in different containers. However, IPC does not affect the ability to set the system time from inside a Docker container.

• Question 97:

  Does this command create a swarm service that only listens on port 53 using the UDP protocol? Solution: 'docker service create --name dns-cache -p 53:53/udp dns-cache'

  A. Yes

  B. No

  Correct Answer: A

  This command creates a swarm service that only listens on port 53 using the UDP protocol, because the -p flag specifies the published port and target port separated by a colon (:) and followed by the protocol name (/udp). According to the official documentation, this is an example of using the short version of the publish option to expose a port for a service.

• Question 98:

  In the context of a swarm mode cluster, does this describe a node? Solution: a physical machine participating in the swarm

  A. Yes

  B. No

  Correct Answer: A

  A physical machine participating in the swarm is a node in the context of a swarm mode cluster. A node is an instance of the Docker engine participating in the swarm. A node can be either a physical machine or a virtual machine. Nodes are either managers or workers. Managers maintain cluster state and manage cluster tasks. Workers execute tasks assigned by managers.

• Question 99:

  Will this command list all nodes in a swarm cluster from the command line? Solution: `docker Is -a'

  A. Yes

  B. No

  Correct Answer: B

  Using `docker ls -a' does not list all nodes in a swarm cluster from the command line. The docker ls command is not a valid command. To list containers, you need to use `docker container ls' or `docker ps'. To list images, you need to use `docker image ls' or `docker images'. To list nodes in a swarm cluster, you need to use `docker node ls'.

• Question 100:

  Which networking drivers allow you to enable multi-host network connectivity between containers?

  A. macvlan, ipvlan, and overlay

  B. bridge, user-defined, host

  C. bridge, macvlan, ipvlan, overlay

  D. host, macvlan, overlay, user-defined

  Correct Answer: A