Docker Docker Certified Associate DCA Questions & Answers

• Question 21:

  Which set of commands can identify the publishd port(s) for a container? (Choose 1.)

  A. 'docker port inspect', 'docker container inspect'

  B. 'docker container inspect', docker port'

  C. 'docker info','docker network inspect'

  D. 'docker network inspect','docker port'

  Correct Answer: B

• Question 22:

  The following health check exists in a Dockerfile:

  'HEALTCHECK

  CMD curl --fail http://localhost/health || exit 1

  Which of the following describes its purpose?

  A. Defines the action taken when container health fails, which in this case will kill the container with exit status 1.

  B. Defines the health check endpoint on the localhost interface for external monitoring tools to monitor the health of the docker engine.

  C. Defines the health check endpoint on the local host interface for containers to monitor the health of the docker engine.

  D. Defines the health check for the containerized application so that the application health can be monitored by the Docker engine

  Correct Answer: A

• Question 23:

  In the context of a swarm mode cluster, does this describe a node? Solution: a virtual machine participating in the swarm

  A. Yes

  B. No

  Correct Answer: B

• Question 24:

  Is this a supported user authentication method for Universal Control Plane? Solution: PAM

  A. Yes

  B. No

  Correct Answer: B

• Question 25:

  Will this command mount the host's '/data' directory to the ubuntu container in read-only mode? Solution: 'docker run -v /data:/mydata --mode readonly ubuntu'

  A. Yes

  B. No

  Correct Answer: A

• Question 26:

  Which statement is true?

  A. CMD shell format uses this form ["param", param", "param"]

  B. ENTRYPOINT cannot be used in conjuction with CMD

  C. CMD is used to run the software is the image along with any arguments

  D. ENTRYPOINT cannot be overriden in the "docker container run" command

  Correct Answer: A

• Question 27:

  What is the difference between a resource limit and a resource reservation when scheduling services?

  A. A resource limit and a resource reservation can be used interchangeably.

  B. A resource limit is a soft limit for your service, while a reservation is hard limit and the docker engine will do its best to keep your service at the limit.

  C. A resource limit is used to find a host with adequate resources for scheduling a hard limit for your service, while a reservation is hard limit for your service.

  D. A resource limit is hard limit for your service, while a reservation is used to find a host with adequate resources for scheduling. Correct

  Correct Answer: A

• Question 28:

  Will this command list all nodes in a swarm cluster from the command line? Solution: 'docker node Is'

  A. Yes

  B. No

  Correct Answer: B

• Question 29:

  You want to create a container that is reachable from its host's network. Does this action accomplish this? Solution: Use either EXPOSE or --publish to access the containers on the bridge network

  A. Yes

  B. No

  Correct Answer: A

• Question 30:

  Following the principle of least privilege, which of the following methods can be used to securely grnt access to the specific user to communicate to a Docker engine? (Choose two.)

  A. Utilize the '--host 0.0.0.0:2375' option to the Docker daemon to listen on port 2375 over TCP on all interfaces

  B. Utilize openssl to create TLS client and server certificates, configuring the Docker engine to use with mutual TLS over TCP.

  C. Utilize the '--host 127.0.0.1:2375' option to the Docker daemon to listen on port 2375 over TCP on localhost

  D. Give the user root access to the server to allow them to run Docker commands as root.

  E. Add the user to the 'docker' group on the server or specify the grouè with the '--group' Docker daemon option.

  Correct Answer: BE