Docker Certified Associate (DCA) Practice Exams Set 5

Here is a list of all the docker images stored on your docker host. Out of all these images, we want to remove images referencing to the fd484f19954f image tag. Which of the following commands will return a flawless result?


Options are :

  • docker rmi fd484f19954f
  • docker rmi -f fd484f19954f
  • docker rmi --all
  • docker image prune --all

Answer : docker rmi -f fd484f19954f

Docker Certified Associate (DCA) Practice Exams Set 26

Which of the following commands is used to update the container’s configuration dynamically?


Options are :

  • docker update
  • docker container upgrade
  • docker config --update
  • docker settings update

Answer : docker update

Which of the following algorithms is used by the manager node to manage the state of the swarm cluster?


Options are :

  • Proof-of-Authority algorithm
  • Unique node list algorithm
  • SIEVE consensus algorithm
  • Raft consensus algorithm

Answer : Raft consensus algorithm

How many cgroups are created for each container in Docker?


Options are :

  • 1
  • 2
  • 3
  • 4

Answer : 1

Docker Certified Associate (DCA) Practice Exams Set 8

True or False?

By default, a container can only consume 60% of the resources provided by the host’s kernel scheduler.


Options are :

  • True
  • False

Answer : False

Which of the following storage drivers is used for testing purposes and for systems without a copy-on-write strategy?


Options are :

  • overlay2
  • aufs
  • devicemapper
  • vfs

Answer : vfs

Which of the following storage drivers are block-level storage drivers?


Options are :

  • zfs
  • aufs
  • overlay2
  • devicemapper

Answer : zfs devicemapper

Docker Certified Associate (DCA) Practice Exams Set 6

True or False?

The overlay storage driver only works with 2 layers: lowerdir and upperdir.


Options are :

  • True
  • False

Answer : True

Which of the following mechanisms is used by nodes to authenticate, authorize, and encrypt the communications with other nodes in the swarm?


Options are :

  • Zimmermann Real-Time Transport Protocol
  • Transport Level Security
  • GNU Privacy Guard
  • Double Ratchet Algorithm

Answer : Transport Level Security

Which of the following is the default AppArmor security profile for containers in Docker?


Options are :

  • docker-app
  • docker-secure
  • docker-default
  • docker/apparmor

Answer : docker-default

Docker Certified Associate (DCA) Practice Exams Set 12

By default, how much time does a node take to renew its certificate in a swarm cluster?


Options are :

  • 12 days
  • 20 days
  • 60 days
  • 90 days

Answer : 90 days

Which of the following commands is used to force a worker-1 node to leave the swarm cluster?


Options are :

  • docker swarm leave --force
  • docker swarm leave --force worker-1
  • docker swarm exit --force
  • docker swarm exit --force worker-1

Answer : docker swarm leave --force

Which of the following role-grants does Kubernetes provide?


Options are :

  • ClusterRoleBinding
  • NodeRoleBinding
  • RoleBinding
  • PodRoleBinding

Answer : ClusterRoleBinding RoleBinding

Docker Certified Associate (DCA) Practice Exams Set 4

True or False?

If the type of orchestrator is changed, the existing workload will migrate to the new orchestrator automatically.


Options are :

  • True
  • False

Answer : False

Which of the following commands is used to schedule swarm workloads on a node?


Options are :

  • docker node update \ --label-add com.docker.orchestrator.swarm=true
  • docker node update \ --label-add com.docker.ucp.orchestrator.swarm=true
  • docker node update \ --label-add com.docker.orchestrator.ucp.swarm=true
  • docker node update \ --add-label com.docker.orchestrator.ucp.swarm=true

Answer : docker node update \ --label-add com.docker.ucp.orchestrator.swarm=true

Which of the following networks is used as the default network for kubernetes by Universal Control Plane?


Options are :

  • Weave net
  • Flannel
  • Calico
  • Cilium

Answer : Calico

Docker Certified Associate (DCA) Practice Exams Set 26

Fill in the blanks.

The repository’s name should be ________ to ________ characters long.


Options are :

  • 1 to 255 characters
  • 2 to 255 characters
  • 3 to 255 characters
  • 4 to 255 characters

Answer : 2 to 255 characters

Which of the following licences is followed by the official distribution of Docker?


Options are :

  • MIT software licence
  • Creative Commons
  • BSD
  • Apache 2.0

Answer : Apache 2.0

True or False?

Docker Trusted Registry can only be installed on-premise.


Options are :

  • True
  • False

Answer : False

Docker Certified Associate (DCA) Practice Exams Set 8

According to Docker, how many nodes should be set up in a cluster to achieve high-availability on DTR?


Options are :

  • minimum of 3 nodes
  • minimum of 2 nodes
  • minimum of 4 nodes
  • minimum of 5 nodes

Answer : minimum of 3 nodes

Which of the following endpoints exposed by DTR is used to monitor the health of DTR replicas?


Options are :

  • /_ping
  • /_connect
  • /_staus
  • /_healthcheck

Answer : /_ping

How would you define Notary in Docker Trusted Registry?


Options are :

  • It is a tool for 3rd party volume management.
  • It is a tool for image storage, management, and disposal.
  • It is a tool for user authentication and management.
  • It is a tool for publishing and managing a trusted collection of content.

Answer : It is a tool for publishing and managing a trusted collection of content.

Docker Certified Associate (DCA) Practice Exams Set 21

Which of the following is the correct GUN format for naming Docker Images for Notary Client?


Options are :

  • notary {cmd} docker.io/
  • notary {cmd} docker.io/library/
  • notary {cmd} docker.io/storage/
  • notary {cmd} docker.io/system/

Answer : notary {cmd} docker.io/library/

Which of the following is not a type of Webhook?


Options are :

  • TAG_PULL
  • TAG_REPAIR
  • PUSH_MIRRORING
  • PROMOTION

Answer : TAG_REPAIR

What is a Pause Container?


Options are :

  • An emergency backup container used to backup pod’s state while pod approaches an error state.
  • A monitor container used to monitor and log the container’s boot process inside a pod.
  • An empty container which holds cgroups, reservations, namespaces of a pod before its individual container is created.
  • A container state between container creation state and before the container running state.

Answer : An empty container which holds cgroups, reservations, namespaces of a pod before its individual container is created.

Docker Certified Associate (DCA) Practice Exams Set 8

Is it possible to join a new node to a swarm cluster after removing Universal Control Plane from the cluster?


Options are :

  • Yes, you can go to swarm manager terminal and use docker swarm join command.
  • No, because UCP’s removal blocks any other access to swarm cluster.
  • Yes, you can reinstall UCP on the cluster and then join the node.
  • No, because the cluster will be unstable for any new process initialization.

Answer : Yes, you can reinstall UCP on the cluster and then join the node.

Which of the following is the core component of the Universal Control Plane?


Options are :

  • ucp-controller
  • ucp-manager
  • ucp-worker
  • ucp-agent

Answer : ucp-agent

Which of the following keys is not a Docker Trusted Content key?


Options are :

  • tagging keys
  • offline keys
  • server-managed keys
  • CA keys

Answer : CA keys

Docker Certified Associate (DCA) Practice Exams Set 26

What is the role of the mode variable in Docker Content Trust?



Options are :

  • It changes the operating mode of the docker engine.
  • It instructs the docker engine whether to enforce signed docker images or not.
  • It instructs the docker engine whether the image source is trustworthy or not.
  • It indicates the operating mode of Docker content trust.

Answer : It instructs the docker engine whether to enforce signed docker images or not.

By default, Docker runs through a non-networked UNIX socket.


Options are :

  • True
  • False

Answer : True

What is a “Builder Pattern” in Docker?


Options are :

  • It is a standard to write Dockerfiles.
  • It is a process of creating docker containers based on docker images.
  • It is a pattern followed and suggested by Docker Swarm to bootstrap a swarm cluster.
  • It is a design pattern used to maintain 2 individual Dockerfiles for app development and production purposes.

Answer : It is a design pattern used to maintain 2 individual Dockerfiles for app development and production purposes.

Docker Certified Associate (DCA) Practice Exams Set 5

True or False?

Docker registry is an instance of Docker Hub.


Options are :

  • True
  • False

Answer : False

Which of the following flags is used to change the container’s default hostname?


Options are :

  • --name
  • --ip
  • --hostname
  • --rename

Answer : --hostname

Fill in the blank.

Services using the routing mesh are running in the ___________.


Options are :

  • Swarm mode
  • Virtual IP mode
  • Global mode
  • DNSRR mode

Answer : Virtual IP mode

Docker Certified Associate (DCA) Practice Exams Set 27

Which of the following commands is used to create an overlay network for standalone containers?


Options are :

  • docker network create -d overlay test-overlay
  • docker network create -d overlay --attachable test-overlay
  • docker network create --ingress test-overlay
  • docker swarm create -d overlay test-service

Answer : docker network create -d overlay --attachable test-overlay

From whom does the container inherit the default DNS settings?


Options are :

  • docker host
  • docker daemon
  • base image
  • docker registry

Answer : docker daemon

What is the default location of the configuration files of Docker CLI?


Options are :

  • /etc/docker/daemon.json
  • ~/.docker
  • /var/lib/docker
  • /root/docker/docker_cli

Answer : ~/.docker

Docker Certified Associate (DCA) Practice Exams Set 9

How many characters can be contained in an image tag name?


Options are :

  • 32
  • 256
  • 64
  • 128

Answer : 128

Which of the following is the default mount point for a decrypted secret in a Windows container?


Options are :

  • C:\ProgramData\Docker\secrets
  • C:\Users\Docker\secrets
  • C:\Docker\secrets
  • C:\Users\internal\Docker\secrets

Answer : C:\ProgramData\Docker\secrets

True or False?

Docker config is only supported by Linux containers.


Options are :

  • True
  • False

Answer : False

Docker Certified Associate (DCA) Practice Exams Set 6

Which of the following networks is responsible for communication between DTR components running on different nodes?


Options are :

  • dtr-br
  • dtr-macvlan
  • dtr-ol
  • dtr-host

Answer : dtr-ol

Docker Certified Associate (DCA) Practice Exams Set 9

True or False?

DTR can be installed on a standalone Docker Engine.


Options are :

  • True
  • False

Answer : False

Which of the following mechanisms is used to automatically delete unused image layers in DTR?


Options are :

  • Image cleaner
  • Garbage collection
  • Garbage cleaner
  • Image collection

Answer : Garbage collection

There is a DTR cluster running 6 DTR replicas. Out of which, 1 replica is behaving a bit odd than its desired state. You have been assigned the task to determine whether this cluster is healthy or not. Out of the following options, what will be your verdict?


Options are :

  • Cluster is unhealthy because the majority of replicas are not working properly.
  • Cluster is healthy but it has lost its quorum.
  • Cluster is healthy because the majority of replicas are working fine.
  • Cluster is unhealthy because one replica is not working properly.

Answer : Cluster is healthy because the majority of replicas are working fine.

Docker and Containers: Commands Set 2

Which of the following security frameworks is used as the underlying framework in Notary to create, manage, and distribute the metadata to ensure the integrity and origin of the content?


Options are :

  • The Operator Framework (TOF)
  • The Update Framework (TUF)
  • Flux
  • Packer

Answer : The Update Framework (TUF)

Comment / Suggestion Section
Point our Mistakes and Post Your Suggestions
  • From whom does the container inherit the default DNS settings?
    
    
    Options are :
    
    docker host  ---> good answer
    docker daemon
    base image
    docker registry
    Answer : docker daemon
    Reply
  • From whom does the container inherit the default DNS settings?
    
    
    Options are :
    
    docker host  ---> good answer
    docker daemon
    base image
    docker registry
    Answer : docker daemon
    Reply