Docker Certified Associate 2020 - Practice Exams - NEW Set 9

Pods use claims as volumes. The cluster inspects the claim to find the bound volume and mounts that volume for a Pod. If a user deletes a PVC in active use by a Pod, the PVC is not removed immediately. True or False ?


Options are :

  • False. (Correct)
  • True.

Answer :False.

What command is used to push an image to a registry or to share images to the Docker Hub registry ?


Options are :

  • docker pull [OPTIONS] NAME[:TAG]
  • docker commit [OPTIONS] NAME[:TAG]
  • docker push [OPTIONS] NAME[:TAG] (Correct)
  • docker upload [OPTIONS] NAME[:TAG]

Answer :docker push [OPTIONS] NAME[:TAG]

Docker Certified Associate (DCA) Practice Exams Set 16

Which of the following are two different types of client certificates?


Options are :

  • CLI bundles
  • admin user certificates bundles (Correct)
  • user certificate bundles (Correct)
  • Ops certificates bundles

Answer :admin user certificates bundles user certificate bundles

The command 'docker inspect' returns low-level information on Docker objects . What is the format of 'docker inspect' command output ?


Options are :

  • plain text
  • xml format
  • html code
  • JSON array (Correct)

Answer :JSON array

What is the docker command to add or update a service’s bind mounts or volumes?


Options are :

  • docker service --add-update-mount
  • docker service set --add-update-mount
  • docker service --mount-volume
  • docker service update --mount-add (Correct)

Answer :docker service update --mount-add

Docker Certified Associate (DCA) Practice Exams Set 13

Docker Universal Control Plane (UCP), the UI for Docker Enterprise, lets you authorize users to view, edit, and use cluster resources by granting role-based permissions against resource sets. What is a grant made up of in Docker's Role Based Access Controls (RBAC) ? (Select all that apply)


Options are :

  • Certificate
  • Resource collection (Correct)
  • Subject (Correct)
  • Role (Correct)

Answer :Resource collection Subject Role

Docker security scan can be performed using online and offline mode . Its security scan result is available in both UCP and DTR. True or false?


Options are :

  • TRUE.
  • FALSE. (Correct)

Answer :FALSE.

Which command enables you to scale one or more replicated services either up or down to the desired number of replicas?


Options are :

  • docker service scale (Correct)
  • docker service replica
  • docker service increase
  • docker service build

Answer :docker service scale

Docker Certified Associate (DCA) Practice Exams Set 6

Whats is the command to set the DNS search domain for all Docker containers?


Options are :

  • dockerd --dns-search domainexample.com (Correct)
  • docker container -a --dns domainexample.com
  • docker container -a --dns-search domainexample.com
  • dockerd --dns domainexample.com

Answer :dockerd --dns-search domainexample.com

It is possible to monitor the status of UCP by using web UI or the CLI. From this point, what is the endpoint that it can be used to check if a node is healthy or not ?


Options are :

  • https:///_health
  • https:///_status
  • https:///_stats
  • https:///_ping (Correct)

Answer :https:///_ping

Which of following options below enable a container to restart automatically if it stops, except that, when the container is stopped manually ?


Options are :

  • docker run -d --restart-policy unless-stopped apache
  • docker run -d --restart unless-stopped apache (Correct)
  • docker run -d --health-start-period 0 apache
  • docker run -d --live-restart unless-stopped apache

Answer :docker run -d --restart unless-stopped apache

Docker Certified Associate (DCA) Practice Exams Set 10

Whats is the command to set the DNS server for all Docker containers ?


Options are :

  • dockerd --dns 8.8.8.8 (Correct)
  • dockerd --dns-search 8.8.8.8
  • dockerd --set-dns 8.8.8.8
  • dockerd --dns-server 8.8.8.8

Answer :dockerd --dns 8.8.8.8

Docker uses a technology called namespaces to provide the isolated workspace called the container. That way, what namespaces are used by Docker engine ?


Options are :

  • SEC
  • IPC (Correct)
  • NET (Correct)
  • PID (Correct)
  • OPT

Answer :IPC NET PID

What are the requirements to backup EE components ?


Options are :

  • Ensure time synchronization between UCP managers.
  • Have adequate space available for backup contents. (Correct)
  • Before performing a backup or restore operation for any component of Docker Enterprise, you must have healthy managers. (Correct)
  • Ensure ESP traffic between UCP managers.

Answer :Have adequate space available for backup contents. Before performing a backup or restore operation for any component of Docker Enterprise, you must have healthy managers.

Docker Certified Associate (DCA) Practice Exams Set 11

Which of the following ensure that, "Content trust will be enforced and an image that cannot be verified successfully will not be pulled or run" ?


Options are :

  • export TRUST_DOCKER_IMAGE=1
  • export TRUST_DOCKER_CONTENT=1
  • export DOCKER_CONTENT_TRUST=1 (Correct)
  • export SIGN_DOCKER_IMAGE=1

Answer :export DOCKER_CONTENT_TRUST=1

How to copy Docker images from one host to another ?


Options are :

  • 'docker save -o ' to backup the image , and docker push' to send the image to target host . Then, 'docker load -i
  • 'docker save -o ' to save the image as TAR file and copy it over to the target host. Then, on the target host, use 'docker load -i ' to un-TAR the image back as a Docker image. (Correct)
  • 'docker commit [OPTIONS] CONTAINER [REPOSITORY[:TAG]]' to save the image outside of the Docker filesystem. Then transfer the file over to the target host and 'docker start' to start the container again.
  • There is no way of directly transferring Docker images between hosts. A Docker Registry must be used ad an intermediary.

Answer :'docker save -o ' to save the image as TAR file and copy it over to the target host. Then, on the target host, use 'docker load -i ' to un-TAR the image back as a Docker image.

Which of the following options are valid to deploy a stack using a compose file?


Options are :

  • docker stack up -f docker-compose.yml production
  • cat docker-compose.yml - docker stack deploy --compose-file - production (Correct)
  • docker compose up -s deploy docker-compose.yml production
  • docker stack deploy --compose-file docker-compose.yml production (Correct)

Answer :cat docker-compose.yml - docker stack deploy --compose-file - production docker stack deploy --compose-file docker-compose.yml production

Docker Certified Associate (DCA) Practice Tests Set 11

Which of the following ensure that a service task uses no more than 4GB of memory on a node?


Options are :

  • docker service create --limit-quota=4GB --name=web nginx:alpine
  • docker service create --reserve-memory=4GB --name=too-big nginx:alpine
  • docker service create --reserve-quota=4GB --name=web nginx:alpine
  • docker service create --limit-memory=4GB --name=web nginx:alpine (Correct)

Answer :docker service create --limit-memory=4GB --name=web nginx:alpine

Docker Universal Control Plane (UCP), the UI for Docker Enterprise, lets you authorize users to view, edit, and use cluster resources by granting role-based permissions called RBAC (Role based access controls). What does this RBAC consists of ?


Options are :

  • Resource collection, Role and Subject. (Correct)
  • Users, Teams, and Organizations
  • Service accounts, Grants and Certificates
  • Users, Groups and Permissions.

Answer :Resource collection, Role and Subject.

What is the main purpose of a UCP client bundle ?


Options are :

  • Provide a new user instructions for how to login to the Universal Control Plane
  • Provide organization groups in a team in the Universal Control Plane
  • It allows you to authorize a remote Docker engine to a specific user account managed in Docker EE, absorbing all associated RBAC controls in the process. (Correct)
  • Provide a user with a Docker client binary compatible with the Universal Control Plane

Answer :It allows you to authorize a remote Docker engine to a specific user account managed in Docker EE, absorbing all associated RBAC controls in the process.

Docker Certified Associate (DCA) Practice Tests Set 7

Which of the following will create a service that it will listen on port 8080 and forward to port 80 in the container ?


Options are :

  • docker service create --publish 80:8080 redis
  • docker service run --publish 80:8080 redis
  • docker service start --publish 8080:80 redis
  • docker service create --publish 8080:80 redis (Correct)

Answer :docker service create --publish 8080:80 redis

Following is the persistent volume claim. The Sysadmin decides to remove PVC. Thus, the volume will be removed. True or False ?


Options are :

  • False
  • True (Correct)

Answer :True

By default, users with read and write access to a repository can push the same tag multiple times to that repository. In order to prevent tags from being overwritten, you can configure a repository to be immutable. True or False ?


Options are :

  • True (Correct)
  • False.

Answer :True

Docker Certified Associate (DCA) Practice Exams Set 6

A replicated service is a service that runs one task on every node, furthermore there is no pre-specified number of tasks. On the other hand, global services you specify the number of identical tasks that you want to run onto available nodes. True or False ?


Options are :

  • False. (Correct)
  • True.

Answer :False.

What command shows layers of an image ?


Options are :

  • docker image info
  • docker image ps
  • docker history (Correct)
  • docker image ls

Answer :docker history

It is possible to configure the Docker Trusted Registry (DTR) to automatically delete unused image layers, thus saving you disk space. How does it known this process ?


Options are :

  • This process is also known as clean images.
  • This process is also known as images purge.
  • This process is also known as clean image storage.
  • This process is also known as garbage collection. (Correct)

Answer :This process is also known as garbage collection.

Docker Certified Associate (DCA) Practice Tests Set 7

In a Kubernetes environment, a role of Restrict Policy is associated with a user A. In this way, user  A will be unable to launch a privileged container. True or False ?


Options are :

  • False
  • True (Correct)

Answer :True

Which command has to be executed to enable Docker client to sign an image before push to DTR ?


Options are :

  • export TRUST_DOCKER_CONTENT=1
  • export DOCKER_CONTENT_TRUST=1 (Correct)
  • docker image secure
  • docker image push --secure

Answer :export DOCKER_CONTENT_TRUST=1

What information does DTR Backup save ?


Options are :

  • Scan Image results, Notary data , Certificates and keys. (Correct)
  • Image content, Image blobs and Image Vulnerability database.
  • Access control to repos and images. (Correct)
  • DTR Settings, Cluster Configurations and Repository Metadata. (Correct)

Answer :Scan Image results, Notary data , Certificates and keys. Access control to repos and images. DTR Settings, Cluster Configurations and Repository Metadata.

Docker and Containers: Commands Set 1

You can install DTR on-premises or on a cloud provider. What are the requirements to install DTR? (Select all that apply)


Options are :

  • Make sure the port 80 and 443 are open on the node (Correct)
  • All nodes must be a replicated node managed by Universal Control Plan
  • All nodes must have a fixed hostname (Correct)
  • All nodes must be a worker node managed by Universal Control Plan (Correct)

Answer :Make sure the port 80 and 443 are open on the node All nodes must have a fixed hostname All nodes must be a worker node managed by Universal Control Plan

Comment / Suggestion Section
Point our Mistakes and Post Your Suggestions