Mirantis Mirantis Certifications DCA Questions & Answers

• Question 61:

  You are running only Kubernetes workloads on a worker node that requires maintenance, such as installing patches or an OS upgrade Which command must be run on the node to gracefully terminate all pods on the node, while marking the node as unschedulable?

  A. 'docker node update --availability drain '

  B. 'docker swarm leave'

  C. 'kubectl drain '

  D. 'kubectl cordon '

  Correct Answer: D

• Question 62:

  Does this command create a swarm service that only listens on port 53 using the UDP protocol? Solution. `docker service create -name dns-cache -p 53:53 -udp dns-cache'

  A. Yes

  B. No

  Correct Answer: A

  This command does create a swarm service that only listens on port 53 using the UDP protocol. The docker service create command creates a new service in a swarm cluster. The --name flag sets the name of the service. The -p or --publish flag publishes a port or a range of ports to the swarm. The syntax for publishing a port is -p :[/protocol]. The protocol can be tcp or udp. If no protocol is specified, tcp is used by default. In this case, the command publishes port 53 on the swarm and maps it to port 53 in the container using the udp protocol. Therefore, this command creates a swarm service that only listens on port 53 using the udp protocol.

• Question 63:

  Is this the purpose of Docker Content Trust? Solution: Verify and encrypt Docker registry TLS.

  A. Yes

  B. No

  Correct Answer: B

  Verifying and encrypting Docker registry TLS is not the purpose of Docker Content Trust. According to the official documentation, this is done by using HTTPS or self- signed certificates for secure communication with a registry.

• Question 64:

  Which of the following modes can be used for service discovery of a Docker swarm service (Pick 2 correct answers)

  A. Virtual IP (VIP) with --endpoint-mode vip

  B. Overlay with --endpoint-mode overlay

  C. DNS Round-Robin with --endpoint-mode dnsrr

  D. Ingress with --endpoint-mode ingress

  E. Network Address Translation(NAT) with --endpoint-mode nat

  Correct Answer: AC

• Question 65:

  Seven managers are in a swarm cluster.

  Is this how should they be distributed across three datacenters or availability zones?

  Solution: 3-2-2

  A. Yes

  B. No

  Correct Answer: A

  This is how they should be distributed across three datacenters or availability zones, because having an even distribution of managers across datacenters or availability zones ensures that the swarm can survive the loss of any one datacenter or availability zone and maintain quorum. According to the official documentation, managers should be distributed evenly across datacenters or availability zones to ensure that the swarm can survive the loss of any one datacenter or availability zone.

• Question 66:

  Which command interactively monitors all container activity in the Docker engine?

  A. docker system logs

  B. docker system events

  C. docker container events

  D. docker container logs

  Correct Answer: B

• Question 67:

  You have deployed a service to swarm. Which command uses the Docker CLI to set the number of tasks of the services to 5? (choose 2)

  A. 'docker service update --replicas=5 '

  B. 'docker replica update =5'

  C. 'docker update service =5'

  D. 'docker service replicas =5'

  E. 'docker service scale = 5''

  Correct Answer: AE

• Question 68:

  Is this a function of UCP?

  Solution: scans images to detect any security vulnerability

  A. Yes

  B. No

  Correct Answer: B

  Scanning images to detect any security vulnerability is not a function of UCP. UCP stands for Universal Control Plane, which is a web-based user interface for managing Docker Enterprise clusters and applications. UCP does not provide image scanning capabilities, but it integrates with Docker Trusted Registry (DTR), which does offer image scanning as part of its security features.

• Question 69:

  Does this command display all the pods in the cluster that are labeled as 'env: development'?

  Solution: 'kubectl get pods --all-namespaces -I env=development'

  A. Yes

  B. No

  Correct Answer: A

  This command does display all the pods in the cluster that are labeled as env: development. The kubectl get pods command shows information about all the pods in a cluster or a specific namespace. The --all-namespaces flag tells kubectl to include pods from all namespaces in the output. The -l flag tells kubectl to filter the output by a label selector, which is an expression that matches labels to values. The label selector `env in (development)' matches pods that have a label env with a value development. Therefore, this command displays all the pods in the cluster that are labeled as env: development.

• Question 70:

  A persistentVolumeClaim (PVC) is created with the specification storageClass: "", and size requirements that cannot be satisfied by any existing persistentVolume. Is this an action Kubernetes takes in this situation?

  Solution: The PVC remains unbound until a persistentVolume that matches all requirements of the PVC becomes available.

  A. Yes

  B. No

  Correct Answer: A

  The PVC remains unbound until a persistentVolume that matches all requirements of the PVC becomes available is an action Kubernetes takes in this situation. A persistentVolumeClaim (PVC) is a request for storage by a user. A PVC specifies the desired size, access modes, and storage class of the storage. A persistentVolume (PV) is a piece of storage in the cluster that has been provisioned by an administrator. A PV has a lifecycle independent of any individual pod that uses it. A PVC is automatically bound to a suitable PV based on its requirements. If no PV exists that matches the PVC, and dynamic provisioning is not enabled, then the PVC remains unbound indefinitely until a matching PV is created.