Mirantis Mirantis Certifications DCA Questions & Answers

• Question 151:

  Which of the following is true about using the '-P' option when creating a new container?

  A. Docker binds each exposed container port to a random port on all the host's interface

  B. Docker gives extended privileges to the container.

  C. Docker binds each exposed container port to a random port on a specified host interface

  D. Docker binds each exposed container port with the same port on the host

  Correct Answer: A

• Question 152:

  Two development teams in your organization use Kubernetes and want to deploy their applications while ensuring that Kubernetes-specific resources, such as secrets, are grouped together for each application.

  Is this a way to accomplish this?

  Solution: Create one pod and add all the resources needed for each application

  A. Yes

  B. No

  Correct Answer: B

  his is not a way to accomplish this, because creating one pod and adding all the resources needed for each application is not a good practice for deploying applications in Kubernetes. According to the official documentation, pods are not intended to run multiple instances of an application or different applications that are tightly coupled. Pods are also not meant to hold resources that are shared across applications, such as secrets or configMaps.

• Question 153:

  If installing Docker using devicemapper for storage with the Intent to run production workloads, how should devicemapper be configured

  A. direct-lvm

  B. loop-lvm

  C. overlay-lvm

  D. aufs-lvm

  Correct Answer: A

• Question 154:

  Is this a way to configure the Docker engine to use a registry without a trusted TLS certificate? Solution: Pass the '--insecure-registry' flag to the daemon at run time.

  A. Yes

  B. No

  Correct Answer: A

• Question 155:

  What is the purpose of a client bundle in the Universal Control Plane?

  A. Authenticate a user using client certificates to the Universal Control Plane

  B. Provide a new user instructions for how to login to the Universal Control Plane

  C. Provide a user with a Docker client binary compatible with the Universal Control Plane

  D. Group multiple users in a team in the Universal Control Plane

  Correct Answer: A

• Question 156:

  Is this a Linux kernel namespace that is disabled by default and must be enabled at Docker engine runtime to be used? Solution: net

  A. Yes

  B. No

  Correct Answer: B

• Question 157:

  Does this describe the role of Control Groups (cgroups) when used with a Docker container? Solution: accounting and limiting of resources

  A. Yes

  B. No

  Correct Answer: A

  This does describe the role of Control Groups (cgroups) when used with a Docker container, because accounting and limiting of resources is one of the main functions of cgroups. According to the official documentation, cgroups are a Linux kernel feature that limits and isolates the resource usage of a group of processes, such as CPU, memory, disk I/O, network, etc. Docker can use cgroups to share available hardware resources to containers and optionally enforce limits and constraints.

• Question 158:

  Which of the following are types of namespaces used by Docker to provide isolation? (Choose 2.)

  A. Host

  B. Network

  C. Process ID

  D. Authentication

  E. Storage

  Correct Answer: BC

• Question 159:

  Will this command ensure that overlay traffic between service tasks is encrypted? Solution: docker service create --network --secure

  A. Yes

  B. No

  Correct Answer: B

• Question 160:

  Which of the following namespaces is disabled by default and must be enabled at Docker engine runtime in order to be used?

  A. user

  B. pid

  C. net

  D. mnt

  Correct Answer: A