Docker Certified Associate (DCA) Practice Exams Set 27

What is the docker command to add or update a published port?


Options are :

  • docker service update --publish-add
  • docker service update --publish-port
  • docker service set --add-port
  • docker service modify --add-update-port

Answer : docker service update --publish-add

What is the docker command to add or update a mount on a service?


Options are :

  • docker service --mount-volume
  • docker service set --add-update-mount
  • docker service --add-update-mount
  • docker service update --mount-add

Answer : docker service update --mount-add

Docker Certified Associate (DCA) Practice Exams Set 24

What is the docker command to add or update a node label?


Options are :

  • docker node update --label-add
  • docker node update --set-label
  • docker node modify --set-label
  • docker node add --label

Answer : docker node update --label-add

What is the docker command to roll back to the previous version of a service?


Options are :

  • docker service --rollback
  • docker service update --rollback-version
  • docker service update --rollback
  • docker service --rollback-version

Answer : docker service update --rollback

What is the docker command to increase number of replicas?


Options are :

  • docker service increase
  • docker service replica
  • docker service scale
  • docker service build

Answer : docker service scale

Docker Certified Associate (DCA) Practice Exams Set 21

What is the docker command to update an existing service?


Options are :

  • docker service modify
  • docker service update
  • docker service change
  • docker service config

Answer : docker service update

What is the docker command to add or update a placement constraint?


Options are :

  • docker service update --pref-add
  • docker service update --placement-pref-add
  • docker service update --placement-constraint-add
  • docker service update --constraint-add

Answer : docker service update --constraint-add

Which of the following is NOT true about Raft (docker consensus algorithm)?


Options are :

  • Raft tolerates up to (N-2)/2 failures
  • If a quorum is not reached, the existing tasks will keep running
  • Raft requires a majority or quorum of (N/2) + 1 members
  • If a quorum is not reached, the system will not process any more requests to schedule additional tasks

Answer : Raft tolerates up to (N-2)/2 failures

Docker Certified Associate (DCA) Practice Exams Set 7

What is the docker command to add a placement preference?


Options are :

  • docker service update --constraint-add
  • docker service update --placement-constraint-add
  • docker service update --pref-add
  • docker service update --placement-pref-add

Answer : docker service update --placement-pref-add

What is the docker command to add a network to a service?


Options are :

  • docker service add-network
  • docker service modify --add-network
  • docker service update --network-add
  • docker service set --add-network

Answer : docker service update --network-add

Where do you create Docker Role Based Access Controls (RBAC)?


Options are :

  • Docker Trusted Registry
  • Docker Compose
  • Universal Control Plane
  • Docker Machine

Answer : Universal Control Plane

Docker Certified Associate (DCA) Practice Exams Set 20

Where is the option to integrate Docker Enterprise with LDAP?


Options are :

  • Docker Compose
  • Docker Machine
  • Universal Control Plane
  • Docker Trusted Registry

Answer : Universal Control Plane

Which of the followings are Docker Engine Security features? (select all that apply)


Options are :

  • You can protect the Docker daemon socket and ensure only trusted Docker client connections
  • You can use certificate-based client-server authentication to verify a Docker daemon has the rights to access images on a registry
  • You can configure Dockerís trust features so that your users can push and pull trusted images
  • You can configure secure computing mode (Seccomp) policies to secure system calls in a container

Answer : You can protect the Docker daemon socket and ensure only trusted Docker client connections You can use certificate-based client-server authentication to verify a Docker daemon has the rights to access images on a registry You can configure Dockerís trust features so that your users can push and pull trusted images You can configure secure computing mode (Seccomp) policies to secure system calls in a container

Docker security scan can be started by all users including those with read-only access. True or false?


Options are :

  • FALSE
  • TRUE

Answer : FALSE

Docker Certified Associate (DCA) Practice Exams Set 18

What are the steps needed to sign images in a way that UCP trusts them? (select three)


Options are :

  • Approve image sign on UCP
  • Configure Notary client
  • Initialize trust metadata for the repository
  • Delegate signing to the keys in your UCP client bundle

Answer : Configure Notary client Initialize trust metadata for the repository Delegate signing to the keys in your UCP client bundle

What is the command that need to be executed to sign an image before pushing it to repository?


Options are :

  • export TRUST_DOCKER_CONTENT=1
  • export DOCKER_CONTENT_TRUST=1
  • export SIGN_DOCKER_IMAGE=1
  • export TRUST_DOCKER_IMAGE=1

Answer : export DOCKER_CONTENT_TRUST=1

Docker security scan result is available in both UCP and DTR. True or false?


Options are :

  • FALSE
  • TRUE

Answer : FALSE

Docker Certified Associate (DCA) Practice Exams Set 7

What is a grant made up of in Docker's Role Based Access Controls (RBAC)? (select three)


Options are :

  • Subject
  • Resource collection
  • Certificate
  • Role

Answer : Subject Resource collection Role

What are the two types of UCP client bundles?


Options are :

  • Ops client bundles and dev client bundles
  • Docker CLI bundles and Docker web UI bundles
  • Admin user certificate bundles and user certificate bundles
  • Docker UCP client bundles and DTR client bundles

Answer : Admin user certificate bundles and user certificate bundles

What is the difference between UCP workers and managers?


Options are :

  • ucp-agent service automatically starts serving all UCP components in worker node, and only a proxy service in manager node
  • ucp-agent service automatically starts serving all UCP components in manager node, and only a proxy service in worker node

Answer : ucp-agent service automatically starts serving all UCP components in manager node, and only a proxy service in worker node

Docker Certified Associate (DCA) Practice Exams Set 10

Which of the following is NOT one of the 3 main Docker Container Network Model components?


Options are :

  • Endpoint
  • Routing
  • Network
  • Sandbox

Answer : Routing

Publishing a service's port using the routing mesh makes the service accessible at the published port on every swarm node. True or false?


Options are :

  • TRUE
  • FALSE

Answer : TRUE

What is the docker command to create a container with custom DNS server(s)?


Options are :

  • docker container create --set-dns=IP_ADDRESS
  • docker container create --add-dns=IP_ADDRESS
  • docker container create --dns=IP_ADDRESS
  • docker container create --custom-dns=IP_ADDRESS

Answer : docker container create --dns=IP_ADDRESS

Docker and Containers: Commands Set 4

What is the command to set DNS server for all Docker containers?


Options are :

  • dockerd --set-dns IP_ADDRESS
  • dockerd --dns IP_ADDRESS
  • dockerd --dns-update IP_ADDRESS
  • dockerd --dns-server IP_ADDRESS

Answer : dockerd --dns IP_ADDRESS

What type of network is ingress network?


Options are :

  • macvlan network
  • overlay network
  • bridge network
  • host network

Answer : overlay network

What is the docker command to connect a running container to an existing user-defined bridge?


Options are :

  • docker network attach
  • docker network connect
  • docker connect network
  • docker network join

Answer : docker network connect

Docker Certified Associate (DCA) Practice Exams Set 6

What is the docker run option to publish a port so that an application is accesible externally?


Options are :

  • docker run --open-port
  • docker run --publish
  • docker run --publish-port
  • docker run --expose

Answer : docker run --publish

Which network driver type is best when the network stack should not be isolated from the Docker host, but you want other aspects of the container to be isolated?


Options are :

  • Overlay networks
  • Host networks
  • Macvlan networks
  • User-defined bridge networks

Answer : Host networks

What is the docker command to display detailed information on one or more networks?


Options are :

  • docker network display
  • docker network status
  • docker inspect network
  • docker network inspect

Answer : docker network inspect

Docker Certified Associate (DCA) Practice Exams Set 9

Which of the following docker command can be used to find out all the ports mapped? (select three)


Options are :

  • docker inspect
  • docker network ls
  • docker port
  • docker ps

Answer : docker inspect docker port docker ps

What is the docker command to create a bridge network?


Options are :

  • docker create network
  • docker network add
  • docker network create
  • docker network deploy

Answer : docker network add

Which network driver type is best when you need containers running on different Docker hosts to communicate, or when multiple applications work together using swarm services?


Options are :

  • Macvlan networks
  • Overlay networks
  • Host networks
  • User-defined bridge networks

Answer : Overlay networks

Docker Certified Associate (DCA) Practice Exams Set 7

Which of the following statements is false?


Options are :

  • Linked containers on the default bridge network share environment variables
  • User-defined bridges provide better isolation and interoperability between containerized applications
  • User-defined bridges provide automatic DNS resolution between containers
  • Containers can NOT be attached and detached from user-defined networks on the fly
  • Each user-defined network creates a configurable bridge

Answer : Containers can NOT be attached and detached from user-defined networks on the fly

Which network driver type is best when you need multiple containers to communicate on the same Docker host?


Options are :

  • Overlay networks
  • User-defined bridge networks
  • Host networks
  • Macvlan networks

Answer : User-defined bridge networks

Which network driver type is best when you are migrating from a VM setup or need your containers to look like physical hosts on your network, each with a unique MAC address?


Options are :

  • Macvlan networks
  • Overlay networks
  • User-defined bridge networks
  • Host networks

Answer : Macvlan networks

Docker Certified Associate (DCA) Practice Exams Set 8

You can monitor the status of UCP by using the web UI or the CLI. True or false?


Options are :

  • TRUE
  • FALSE

Answer : TRUE

What is the endpoint that we can use to check the health of a single UCP manager node?


Options are :

  • https:///_status
  • https:///_health
  • https:///_heartbeat
  • https:///_ping

Answer : https:///_ping

What is the docker command to see container logs?


Options are :

  • docker dump-logs
  • docker logs
  • docker debug
  • docker fetch-logs

Answer : docker logs

Docker Certified Associate (DCA) Practice Exams Set 21

Which of the following items need to be considered before installing Docker Enterprise?


Options are :

  • Network ports
  • Disk space
  • Time Synchronization
  • All of the options
  • Docker Engine, DTR, and UCP version compatibility

Answer : All of the options

Which of the following tool to use to create users and teams?


Options are :

  • Docker Machine
  • Docker Trusted Registry (DTR)
  • Universal Control Plane (UCP)
  • Docker Compose

Answer : Universal Control Plane (UCP)

Which of the following is how to configure the Docker daemon to start on boot? (select two)


Options are :

  • Use startup for most current Linux distributions (RHEL, CentOS, Fedora, Ubuntu 16.04 and higher)
  • Use upstart for Ubuntu 14.10 and below
  • Use systemd for most current Linux distributions (RHEL, CentOS, Fedora, Ubuntu 16.04 and higher)
  • Use crond for Ubuntu 14.10 and below

Answer : Use upstart for Ubuntu 14.10 and below Use systemd for most current Linux distributions (RHEL, CentOS, Fedora, Ubuntu 16.04 and higher)

Docker Certified Associate (DCA) Practice Exams Set 11

What is the correct order to backup Docker EE components?


Options are :

  • Back up swarm, UCP, then DTR
  • Back up DTR, UCP, then swarm
  • Back up UCP, swarm, then DTR
  • Back up swarm, DTR, then UCP

Answer : Back up swarm, UCP, then DTR

What is the docker command to see the storage driver Docker is currently using?


Options are :

  • docker inspect
  • docker stats
  • docker info
  • docker config

Answer : docker info

What is the docker command to find the current logging driver for a running container?


Options are :

  • docker stats
  • docker config
  • docker inspect
  • docker info

Answer : docker inspect

Docker Certified Associate (DCA) Practice Exams Set 12

How to configure the default logging driver?


Options are :

  • Set the "log-driver" option in the daemon.json file
  • Use --log-driver flag

Answer : Set the "log-driver" option in the daemon.json file

Comment / Suggestion Section
Point our Mistakes and Post Your Suggestions
  • What is the docker command to create a bridge network?
    
    Options are :
    
    docker create network
    docker network add <-WRONG
    docker network create <-CORRECT
    docker network deploy
    Answer : docker network add <-WRONG
    Reply