Docker Certified Associate 2020 - Practice Exams - NEW Set 3

Domain: Image Creation, Management, and Registry

Which of the following commands can take a tar file as an argument and add the extracted content into the image automatically?


Options are :

  • None of these
  • COPY
  • ADD and COPY both
  • ADD (Correct)

Answer :ADD

Domain: Storage and Volumes

Pick ALL storage drivers from the list below which operate at block level?


Options are :

  • Overlay, aufs, zfs
  • Aufs, btrfs, zfs (Correct)
  • Overlay2, aufs, btrfs, zfs, devicemapper

Answer :Aufs, btrfs, zfs

Docker Certified Associate 2020 - Practice Exams - NEW Set 5

Domain: Image Creation, Management, and Registry

Docker image consists of _____ layers each of which represents a Dockerfile instruction. The layers are stacked and each one is a delta of the changes from the previous layer.


Options are :

  • Write only
  • Movable
  • Read and write
  • Read only (Correct)

Answer :Read only

Domain: Image Creation, Management, and Registry

Which of the following commands can be used to check Entrypoint and CMD of a given docker image?


Options are :

  • Docker image inspect (Correct)
  • Docker image Ls
  • Docker info image

Answer :Docker image inspect

Domain: Image Creation, Management, and Registry

Which of the following is NOT backed up while backing up DTR?


Options are :

  • Repository metadata
  • Certificate and keys
  • Configuration
  • User, orgs, teams (Correct)

Answer :User, orgs, teams

Docker Certified Associate 2020 - Practice Exams - NEW Set 2

Domain: Storage and Volumes

Which of the following is NOT TRUE regarding to Docker config and Docker secrets?


Options are :

  • Secrets and configs are encrypted during transit and at rest in a Docker swarm (Correct)
  • Both configs and secret are encrypted in transit
  • Secrets uses ramdisk to mount the volume and configs does not
  • Default location of configs inside of a container is / whereas the default of secrets inside of a container is /run/secrets/

Answer :Secrets and configs are encrypted during transit and at rest in a Docker swarm

Domain: Security

Which of the following is NOT true about selinux?


Options are :

  • SELinux= Security-Enhanced Linux
  • SELinux come bundled with docker (Correct)
  • SELinux is a set of kernel modifications and user-space tools that have been added to various Linux distributio

Answer :SELinux come bundled with docker

Domain: Storage and Volumes

Bob wants to update the secret being used by one of his service. What is the correct sequence of actions to be performed by him?


Options are :

  • Create a new secret, update the service to use this new secret, delete the old secret (Correct)
  • Update the existing secret using docker secret update
  • Update the existing secret, restart all the services using this secret

Answer :Create a new secret, update the service to use this new secret, delete the old secret

Docker Certified Associate (DCA) Practice Exams Set 8

Domain: Storage and Volumes

Which of the following is NOT true about tmpfs_mounts?


Options are :

  • When the container stops, the tmpfs mount is removed, and files written there won't be persisted
  • mpfs mounts are available for both windows and linux (Correct)
  • As opposed to volumes and bind mounts, a tmpfs move is temporary, and only persisted in the host memory

Answer :mpfs mounts are available for both windows and linux

Domain: Image Creation, Management, and Registry

You are in a directory containing a file named Dockerfile-app. You want to build a docker image using this “Dockerfile-app” file without renaming it to “Dockerfile”. Which of the following answers is correct?


Options are :

  • Docker build --from-file Dockerfile-app
  • Docker build --dockerfile Dockerfile-app
  • Docker build -f Dockerfile-app (Correct)
  • Docker build -d Dockerfile-app

Answer :Docker build -f Dockerfile-app

Domain: Networking

You are creating a new Docker Swarm. This docker Swarm needs to use a subnet range of 172.16.2.0/24 in its overlay network to avoid collision with other networks. Which command below would enforce the usage of this subnet range?


Options are :

  • Docker swarm init --address-pool 172.16.2.0/24
  • Docker swarm init --default-pool 172.16.2.0/24 (Correct)
  • Docker swarm init --addr-pool 172.16.2.0/24

Answer :Docker swarm init --default-pool 172.16.2.0/24

Docker Certified Associate (DCA) Practice Exams Set 27

Domain: Image Creation, Management, and Registry

Which of the following commands can be used to get the disk space used by a running container?


Options are :

  • Docker ps –s (Correct)
  • Docker image Ls
  • Docker stats
  • Docker Ls -s

Answer :Docker ps –s

Domain: Orchestration

"docker service create nginx" is a command that creates a service in docker swarm. Which of the following statements is NOT TRUE?


Options are :

  • A replica will run either from a manager or from a worker mode
  • This command can only be run from a manager node
  • This service will only run from a worker (Correct)
  • Your service will not be able to serve inbound connections

Answer :This service will only run from a worker

Domain: Orchestration

Which of the following is a good distribution of 7 managers across 3 availability zones?


Options are :

  • 1 - 1 - 5
  • 2 - 2 – 3 (Correct)
  • 1 - 2 – 4
  • 3 - 1 - 3

Answer :2 - 2 – 3

Docker Certified Associate (DCA) Practice Test Set 3

Domain: Storage and Volumes

Which of the following lvm mode should a production host using the devicemapper as a storage driver use?


Options are :

  • ZFS
  • Overlay
  • Direct-lvm (Correct)
  • Loop-lvm

Answer :Direct-lvm

Domain: Orchestration

In which of the following circumstances a service WILL NOT end up in a PENDING state?


Options are :

  • If a service cannot meet a constraint rule set during the creation step
  • If you created a global service but set a placement preference
  • If all worker’s nodes are unavailable and you have only manager’s nodes available (Correct)
  • If no node in the swarm has the required amount of resources

Answer :If all worker’s nodes are unavailable and you have only manager’s nodes available

Domain: Security

Which of the following is NOT true about seccomp?


Options are :

  • Seccomp is an application which can be installed independent of docker (Correct)
  • Seccomp filtering provides a means for a process to specify a filter for incoming system calls
  • Seccomp = Secure Computing Mode

Answer :Seccomp is an application which can be installed independent of docker

Docker Certified Associate (DCA) Practice Exams Set 13

Domain: Orchestration

Which of the following options below can be used for scaling the nginx service on a Docker Swarm?


Options are :

  • Docker service scale nginx=3 (Correct)
  • Docker service --replicas=3 nginx
  • Docker swarm --replicas=3 nginx
  • Docker swarm scale nginx=3

Answer :Docker service scale nginx=3

Domain: Image Creation, Management, and Registry

Which of the following commands can use a remote URL to get files inside image?


Options are :

  • COPY and ADD both
  • ADD (Correct)
  • COPY
  • DOWNLOAD

Answer :ADD

Domain: Orchestration

DCT stands for?


Options are :

  • Docker certificate trust
  • Docker content trust (Correct)
  • Docker container transmission
  • Docker content transmission

Answer :Docker content trust

Docker Certified Associate 2020 - Practice Exams - NEW Set 6

Domain: Installation and Configuration

How can you trigger an image build process directly from a git url?


Options are :

  • Docker build --remote https://github.com/example/docker-example.git
  • Docker build https://github.com/bocadilloproject/docker-example.git (Correct)
  • Docker build --from-git https://github.com/bocadilloproject/docker-example.git

Answer :Docker build https://github.com/bocadilloproject/docker-example.git

Domain: Image Creation, Management, and Registry

Which of the following commands can be used to delete an existing image?


Options are :

  • Docker rmi (Correct)
  • Docker rm image
  • Docker image delete
  • Docker rm

Answer :Docker rmi

Domain: Security

You want to ensure that a container doesn’t exceed memory usage than a specified amount. Which of the following will be used by default by docker to achieve that?


Options are :

  • Seccomp
  • Cgroups (Correct)
  • Namespaces
  • Selinux

Answer :Cgroups

Docker Certified Associate (DCA) Practice Exams Set 18

Domain: Image Creation, Management, and Registry

Which of the following is NOT a supported storage backend for a centralized storage in DTR?


Options are :

  • Google cloud storage
  • Openstack Swift
  • NFS
  • AWS EBS volumes (Correct)

Answer :AWS EBS volumes

Domain: Security

You had a security issue and you suspect that someone might have got access to the token for adding managers to your cluster. Since it’s a major security issue - you need to do something about it to prevent your cluster from being misused. What would you do?


Options are :

  • Rotate your join-token only for worker and it will automatically rotate it for manager
  • Rotate your join-token only for manager and it will automatically rotate it for worker
  • Rotate your join-token for both worker and manager (Correct)
  • Rotate your join-token only for manager and it will automatically rotate it for worker

Answer :Rotate your join-token for both worker and manager

Domain: Orchestration

You are running a fleet of swarm nodes on AWS. Your nodes are part of an Autoscaling group, where instances are automatically created and/or destroyed.

You have a 3rd party solution that collects metrics from your host and it will run in your swarm as a service. You must ensure that this task is being run on every node and must not consume more than 512 Mb of RAM. Which of the following commands below meet this criteria?


Options are :

  • Docker service create --mode=global --name node-exporter --limit-memory=512m prom/node-exporter; latest (Correct)
  • Docker service create --mode=replicated --name node-exporter --constraint 'node.max-memory==512M' --replicas=1 prom/node-exporter; latest
  • Docker service create --mode=global --name node-exporter --constraint 'node.max-memory==512M' prom/node-exporter; latest

Answer :Docker service create --mode=global --name node-exporter --limit-memory=512m prom/node-exporter; latest

Docker Certified Associate 2020 - Practice Exams - NEW Set 6

Domain: Installation and Configuration

You have a Docker host that is used to build images and tests them. You create Docker images using the multi-stage build feature. Because of that, there are a large number of dangling images in this host. Which of the following commands you could run to only remove the dangling images?


Options are :

  • Docker prune --filter dangling=true
  • Docker image prune --filter dangling=true (Correct)
  • Docker rim --filter dangling=true
  • Docker system prune

Answer :Docker image prune --filter dangling=true

Domain: Installation and Configuration

Which of the following options would enable to SSH into a running Docker container named 'nginx'?


Options are :

  • Docker ssh -it nginx /bin/sh
  • Docker run -it nginx /bin/sh
  • Docker exec -it nginx /bin/sh (Correct)
  • Docker inspect webserver

Answer :Docker exec -it nginx /bin/sh

Domain: Storage and Volumes

Which of the following is NOT true about docker volumes?


Options are :

  • You can manage volumes using Docker CLI commands but not with Docker API (Correct)
  • Volumes are easier to back up or migrate than bind mounts
  • Volumes work on both linux and windows containers

Answer :You can manage volumes using Docker CLI commands but not with Docker API

Docker Certified Associate 2020 - Practice Exams - NEW Set 2

Domain: Installation and Configuration

Which one of the following is the preferred storage driver, for all currently supported Linux distributions?


Options are :

  • Devicemapper
  • Btrfs
  • Overlayz (Correct)
  • Aufs

Answer :Overlayz

Comment / Suggestion Section
Point our Mistakes and Post Your Suggestions