Docker Docker Certified Associate DCA Questions & Answers

• Question 111:

  After creating a new service named 'http', you notice that the new service is not registering as healthy. How do

  you view the list of historical tasks for that service by using the command line?

  A. 'docker inspect http'

  B. 'docker service inspect http'

  C. 'docker service ps http'

  D. 'docker ps http'

  Correct Answer: C

• Question 112:

  You want to mount external storage to a particular filesystem path in a container in a Kubernetes pod. What is the correct set of objects to use for this?

  A. a volume in the pod specification, populated with a perslstentVolumeClaim bound to a perslstentVolume defined by a storageClass

  B. a storageClass In the pod's specification, populated with a volume which Is bound to a provisioner defined by a persistentVolume

  C. a volume in the pod specification, populated with a storageClass which is bound to a provisioner defined by a perslstentVolume

  D. a perslstentVolume in the pod specification, populated with a persistentVolumeClaim which is bound to a volume defined by a storageClass

  Correct Answer: B

• Question 113:

  Does this describe the role of Control Groups (cgroups) when used with a Docker container? Solution: role-based access control to clustered resources

  A. Yes

  B. No

  Correct Answer: B

• Question 114:

  You are troubleshooting a Kubernetes deployment called api, and want to see the events table for this

  object.

  Does this command display it?

  Solution: kubectl describe deployment api

  A. Yes

  B. No

  Correct Answer: A

• Question 115:

  You configure a local Docker engine to enforce content trust by setting the environment variable

  DOCKER_CONTENT_TRUST=1.

  If myorg/myimage: 1.0 is unsigned, does Docker block this command?

  Solution: docker service create myorg/myimage:1.0

  A. Yes

  B. No

  Correct Answer: B

• Question 116:

  Which of the following commands will create a swarm service which only listens on port 53 using the UDP protocol?

  A. docker service create --name dns-cache -p 53:53/udp dns-cache

  B. docker service create --name dns-cache -p 53:53 --service udp dns-cache

  C. docker service create --name dns-cache -p 53:53 ..constraint networking.protocol.udp=true dns-cache

  D. docker service create --name dns-cache -p 53:53 --udp dns-cache

  Correct Answer: A

• Question 117:

  What is one way of directly transferring a Docker Image from one Docker host in another?

  A. 'docker push' the image to the IP address of the target host.

  B. 'docker commit' to save the image outside of the Docker filesystem. Then transfer the file over to the target host and 'docker start' to start the container again.

  C. There is no way of directly transferring Docker images between hosts. A Docker Registry must be used ad an intermediary.

  D. 'docker save' the image to save it as TAR file and copy it over to the target host. Then use 'docker load' to un-TAR the image back as a Docker image.

  Correct Answer: D

• Question 118:

  Will this command display a list of volumes for a specific container? Solution: 'docker container inspect nginx'

  A. Yes

  B. No

  Correct Answer: A

• Question 119:

  Is this a function of UCP?

  Solution: image role-based access control

  A. Yes

  B. No

  Correct Answer: B

• Question 120:

  You have created a Docker bridge network on a host with three containers attached, how do you make this containers accessible outside of the host?

  A. Use network attach to access the containers on the bridge network

  B. Use either EXPOSE or --publish to access the containers on the bridge network

  C. Use network connect to access the containers on the bridge network

  D. Use --link to access the containers on the bridge network Correct

  Correct Answer: B