Mirantis Mirantis Certifications DCA Questions & Answers

• Question 21:

  You want to mount external storage to a particular filesystem path in a container in a Kubernetes pod. What is the correct set of objects to use for this?

  A. a volume in the pod specification, populated with a perslstentVolumeClaim bound to a perslstentVolume defined by a storageClass

  B. a storageClass In the pod's specification, populated with a volume which Is bound to a provisioner defined by a persistentVolume

  C. a volume in the pod specification, populated with a storageClass which is bound to a provisioner defined by a perslstentVolume

  D. a perslstentVolume in the pod specification, populated with a persistentVolumeClaim which is bound to a volume defined by a storageClass

  Correct Answer: B

• Question 22:

  After creating a new service named 'http', you notice that the new service is not registering as healthy. How do you view the list of historical tasks for that service by using the command line?

  A. 'docker inspect http'

  B. 'docker service inspect http'

  C. 'docker service ps http'

  D. 'docker ps http'

  Correct Answer: C

• Question 23:

  You configure a local Docker engine to enforce content trust by setting the environment variable

  DOCKER_CONTENT_TRUST=1.

  If myorg/myimage: 1.0 is unsigned, does Docker block this command?

  Solution: docker image import myorg/myimage:1.0

  A. Yes

  B. No

  Correct Answer: B

  Docker does not block this command, because docker image import does not verify content trust by default. According to the official documentation, docker image import creates an image from an existing tarball file and does not interact with any registry or sign any content.

• Question 24:

  Will this action upgrade Docker Engine CE to Docker Engine EE? Solution: Manually download the 'docker-ee' package

  A. Yes

  B. No

  Correct Answer: A

• Question 25:

  A host machine has four CPUs available and two running containers. The sysadmin would like to assign two CPUs to each container. Which of the following commands achieves this?

  A. Set the '--cpuset-cpu's flag to '1.3' on one container and '2.4' on the other container.

  B. Set the '--cpuset-cpus' flag to '.5' on both containers

  C. Set the '--cpuset-cpus' flag of the 'dockerd' process to the value 'even-spread'

  D. Set the '--cpu-quota' flag to '1.3' on one container and '2,4' on the other container.

  Correct Answer: B

• Question 26:

  What is one way of directly transferring a Docker Image from one Docker host in another?

  A. 'docker push' the image to the IP address of the target host.

  B. 'docker commit' to save the image outside of the Docker filesystem. Then transfer the file over to the target host and 'docker start' to start the container again.

  C. There is no way of directly transferring Docker images between hosts. A Docker Registry must be used ad an intermediary.

  D. 'docker save' the image to save it as TAR file and copy it over to the target host. Then use 'docker load' to un-TAR the image back as a Docker image.

  Correct Answer: D

• Question 27:

  What behavior is expected when a service is created with the following command: 'docker service create --publish 8000:80 nginx'

  A. All nodes in the cluster will listen on port 8080 and forward to port 80 in the container.

  B. Only a single node in the cluster will listen on port 8080 and forward to port 80 in the container.

  C. All nodes in the cluster will listen on port 80 and forward to port 8080 in the container.

  D. Only a single node in the cluster will listen on port 80 and forward to port 8080 in the container.

  Correct Answer: A

• Question 28:

  Which of the following is required to install Docker EE from a package repository?

  A. Repository URL obtained from Docker Store

  B. License key obtained from Docker Store

  C. Repository URL obtained from Docker Hub

  D. License key obtained from Docker Hub

  Correct Answer: A

• Question 29:

  Will this command display a list of volumes for a specific container? Solution: 'docker container inspect nginx'

  A. Yes

  B. No

  Correct Answer: A

  This command will display a list of volumes for a specific container, because it uses docker container inspect to show detailed information about a container, including its volumes. According to the official documentation, docker container inspect will show the Mounts section that contains information about all volumes mounted by the container.

• Question 30:

  Is this a Linux kernel namespace that is disabled by default and must be enabled at Docker engine runtime to be used? Solution: user

  A. Yes

  B. No

  Correct Answer: A

  user is a Linux kernel namespace that is disabled by default and must be enabled at Docker engine runtime to be used. According to the official documentation, user namespace support must be explicitly enabled in two ways: The dockerd daemon must be started with --userns-remap flag. The user or group specified for --userns-remap must have subordinate user and group IDs allocated in /etc/subuid and /etc/subgid files