Docker Certified Associate 2020 - Practice Exams - NEW Set 1

Domain: Security

Which of the following is NOT true about a feature provided by namespace?


Options are :

  • Namespaces left different sets of processes see different set of resources
  • Processes running within a container cannot see processes running on host system
  • Processes running within a container cannot see processes running in another container
  • It can help in limiting the memory used by a container (Correct)

Answer :It can help in limiting the memory used by a container

Docker Certified Associate (DCA) Practice Exams Set 24

Domain: Orchestration

What is the correct order a system administrator should follow for creating a backup policy for the Docker Enterprise Edition?


Options are :

  • Swarm, ucp, dtr (Correct)
  • Ucp, dtr, swarm
  • Swarm, dtr, ucp
  • Dtr, ucp, swram

Answer :Swarm, ucp, dtr

Domain: Image Creation, Management, and Registry

Which of the following statement is correct? Pick exactly two statements.


Options are :

  • If multiple containers are spawned from the same image, then they all use the same copy of image in memory (Correct)
  • Container can exist without the image but image cannot exist without container
  • Image is a collection of immutable layers whereas container is a running instance of an image (Correct)

Answer :If multiple containers are spawned from the same image, then they all use the same copy of image in memory Image is a collection of immutable layers whereas container is a running instance of an image

Domain: Image Creation, Management, and Registry

You have the following values in your Dockerfile


ENV abc=hello

ENV abc=bye def=$abc

ENV ghi=$abc


What is the correct output of command “echo $abc $def $ghi” run inside the container?


Options are :

  • Bye hello bye (Correct)
  • Hello bye hello
  • Hello hello bye
  • Bye bye hello

Answer :Bye hello bye

Docker Certified Associate (DCA) Practice Tests Set 9

Domain: Networking

Which of the following commands can be used to see IPv4 subnet of a network?


Options are :

  • Docker info network
  • Docker network info
  • Docket network ls
  • Docker network inspect (Correct)

Answer :Docker network inspect

Domain: Installation and Configuration

Bob has configured his docker daemon to use syslog log driver by default, how can he run a container which uses json-file log driver?


Options are :

  • No possible
  • By using "--log-driver json-file"along with docker run (Correct)
  • By using "--log-opt json-file"along with docker run
  • By using "--logger json-file"along with docker run

Answer :By using "--log-driver json-file"along with docker run

Domain: Image Creation, Management, and Registry

Which of the following patterns would exclude all Python byte-code files from being copied during the Docker image creation process?


Options are :

  • ** / .pyc (Correct)
  • .pyc
  • ** .pyc
  • /* .pyc

Answer :** / .pyc

Docker Certified Associate (DCA) Practice Exams Set 20

Domain: Installation and Configuration

Bob has username “bob” on his linux system. He did a fresh installation of Docker and he doesn't want to preface docker commands with sudo. To which linux user group should he add himself to achieve that?


Options are :

  • Owner
  • Docker (Correct)
  • Admins
  • Root

Answer :Docker

Domain: Networking

By default, all containers on the same Docker network (multi-host swarm scope or local scope) have connectivity with each other on _____ ports.


Options are :

  • None
  • All (Correct)
  • Some
  • Defined

Answer :All

Domain: Orchestration

You are running UCP service on a swarm with 3 managers and 2 workers. You need to schedule a backup policy for your UCP service. How many nodes you need to fully back up this service?


Options are :

  • 1 (Correct)
  • 2
  • 5
  • 3

Answer :1

Docker Certified Associate (DCA) Practice Tests Set 5

Domain: Orchestration

Which of the following statements is NOT TRUE about replicated service in docker?


Options are :

  • For replicated services you can specify number of replica tasks
  • If you don't specify a mode, the service defaults to replicated
  • A service running in a replicated mode may not run in all nodes
  • A replicated service, the scheduler places one task on each available that meets the service's placement constraints and resource requirements (Correct)

Answer :A replicated service, the scheduler places one task on each available that meets the service's placement constraints and resource requirements

Domain: Orchestration

You created a Docker swarm cluster using “docker swarm init” command. After creating the swarm cluster you got a command using which you could add a worker to your cluster. But you have lost that command and now you want to add new workers to your cluster. How would you do that?


Options are :

  • Docker swarm init-token manager
  • Docker swarm join-token worker (Correct)
  • Docker swarm join-token manager
  • Docker swarm init-token worker

Answer :Docker swarm join-token worker

Domain: Installation and Configuration

Which of the following gives a web dashboard to manage docker cluster?


Options are :

  • Docker swarm mode
  • Docker UCP (Correct)
  • Docker-compose
  • DTR

Answer :Docker UCP

Docker Certified Associate 2020 - Practice Exams - NEW Set 10

Domain: Orchestration

A global service is a service that runs ____task/tasks on every node that meet the placement and resource constraints


Options are :

  • One (Correct)
  • More than one
  • Many
  • None

Answer :One

Domain: Orchestration

You created a docker swarm cluster using “docker swarm init” command. After creating the swarm cluster you got a command using which you could add a worker to your cluster. But you have lost that command and now you want to add new workers to your cluster. How would you do that?


Options are :

  • Docker swarm join-token worker (Correct)
  • Docker swarm init-token manager
  • Docker swarm join-token manager
  • Docker swarm init-token worker

Answer :Docker swarm join-token worker

Domain: Networking

Overlay networks cannot be created if Docker engine is not a manager node in Docker swarm?


Options are :

  • True (Correct)
  • False

Answer :True

Docker Certified Associate (DCA) Practice Exams Set 17

Domain: Image Creation, Management, and Registry

Given the following Dockerfile below:


FROM alpine

ENTRYPOINT ["exec_entry", "p1_entry"]

CMD ["exec_cmd", "p1_cmd"]


What is the command that gets executed when someone runs this image built using this Dockerfile?


Options are :

  • /bin/sh-c "exec_entry p1_entry exec_cmd p1_cmd"
  • /bin/sh-c "exec_entry p1_entry"
  • exec_entry p1_entry exec_cmd p1_cmd (Correct)
  • exec_cmd p1_cmd

Answer :exec_entry p1_entry exec_cmd p1_cmd

Domain: Networking

Fill in the blank:

On Linux, Docker manipulates _______ rules to provide network isolation.


Options are :

  • Iptables (Correct)
  • Nftables
  • UFW
  • Conntrack
  • Bpfilter

Answer :Iptables

Domain: Security

Docker Content Trust provides the ability to use __________ for verifying integrity and the publisher of all the data received from a registry over any channel.


Options are :

  • A container
  • Digital signatures (Correct)
  • Symmetric key encryption
  • End to end encryption

Answer :Digital signatures

Docker Certified Associate (DCA) Practice Test Set 4

Domain: Storage and Volumes

Which of the following is NOT true about secrets?


Options are :

  • Secrets are mounted in containers filesystem directly
  • Secrets can be used for storing username and password
  • Secrets are available at swarm services and standalone containers (Correct)
  • Secrets are encrypted during transit and also at rest

Answer :Secrets are available at swarm services and standalone containers

Domain: Image Creation, Management, and Registry

Which of the following statement is correct? Pick exactly two statements


Options are :

  • Only one container can be spawned from a given image at a time
  • Container can exist without the image but image cannot exist without container
  • If multiple containers are spawned from the same image, then they all use the same copy of image in memory (Correct)
  • Image is a collection of immutable layers whereas container is a running instance of an image (Correct)

Answer :If multiple containers are spawned from the same image, then they all use the same copy of image in memory Image is a collection of immutable layers whereas container is a running instance of an image

Domain: Networking

Network isolation by docker is provided by which one of the following linux kernel features?


Options are :

  • Ulimits
  • Namespace (Correct)
  • Cgroups
  • File descriptors

Answer :Namespace

Docker Certified Associate (DCA) Practice Tests Set 3

Domain: Image Creation, Management, and Registry

Which of the following commands can take a tar file as an argument and add the extracted content into the image automatically?


Options are :

  • none of these
  • ADD and COPY
  • COPY
  • ADD (Correct)

Answer :ADD

Domain: Security

Grants in UCP are made up of which of the following?


Options are :

  • Nodes, role and containers
  • Subject, node and containers
  • Subject, role and resource set (Correct)
  • Subject, role and containers

Answer :Subject, role and resource set

Domain: Networking

You created a docker swarm with default address pool as this: 10.0.0.0/16

Now when you run the following command to create an overlay network - what IP subnet will be allocated to this overlay network?

NOTE: X can be any value starting from 0 to 255

COMMAND: Docker network create -d overlay --attachable my-attachable-overlay


Options are :

  • 10.2.X.0/24
  • 10.0.X.0/24 (Correct)
  • 10.3.X.0/24
  • 10.1.X.0/24

Answer :10.0.X.0/24

Docker and Containers: Commands Set 1

Domain: Storage and Volumes

Which of the following lvm mode should a production host using the devicemapper as a storage driver use?


Options are :

  • Loop-lvm
  • ZFS
  • Direct-lvm (Correct)
  • Overlay

Answer :Direct-lvm

Domain: Orchestration

You are running a service called 'webserver'. You need to increase the number of replicas of that service to 5. Which of the following commands would achieve this?


Options are :

  • Docker service --replicas-5 webserver
  • Docker service scale webserver-5 (Correct)
  • Docker swarm --replicas-5 webserver
  • Docker swarm scale webserver-5

Answer :Docker service scale webserver-5

Domain: Image Creation, Management, and Registry

Which of the following flags can be used with “docker build” command so that it never uses cached layer during the build steps


Options are :

  • -f
  • -compress
  • -no-cache (Correct)
  • -rm

Answer :-no-cache

Docker Certified Associate (DCA) Practice Test Set 3

Domain: Installation and Configuration

What is docker command to see container logs?


Options are :

  • Docker logs (Correct)
  • Docker dump-logs
  • Docker get-logs
  • Docker fetch-logs

Answer :Docker logs

Domain: Image Creation, Management, and Registry

Which of the following is NOT true about dockerignore?


Options are :

  • .Dockerignore must be present in the root directory of the context
  • .Dockerignore file can be used to exclude files and directories from docker context
  • .Dockerignore is available only with docker enterprise edition (Correct)
  • .Dockerignore can help in bringing down image size and speed up builds

Answer :.Dockerignore is available only with docker enterprise edition

Comment / Suggestion Section
Point our Mistakes and Post Your Suggestions