Docker Certified Associate (DCA) Practice Exams Set 9

An application image runs in multiple environments, and each environment uses different certificates and ports, what is the best practice to deploy the containers?


Options are :

  • A. Create images that contain the specific configuration for every environment.
  • A. Create a config file for each environment.
  • A. Create a Dockerfile for each environment, specifying ports and Docker secrets for certificates.
  • A. Create a Dockerfile for each environment, specifying ports and ENV variables for certificates.

Answer : A. Create a config file for each environment.

Which of the following is NOT one of the 3 main Docker Container Network Model components?


Options are :

  • Endpoint
  • Sandbox
  • Network
  • Routing

Answer : Routing

Docker Certified Associate (DCA) Practice Exams Set 5

Which of the following commands will create a swarm service which only listens on port 53 using the UDP protocol?


Options are :

  • docker service create --name dns-cache -p 53:53 --udp dns-cache
  • docker service create --name dns-cache -p 53:53 --constraint networking-protocol-udp=true dns-cache
  • docker service create --name dns-cache -p 53:53 --service udp dns-cache
  • docker service create --name dns-cache -p 53:53/udp dns-cache

Answer : docker service create --name dns-cache -p 53:53/udp dns-cache

What is the docker command to add or update a node label?


Options are :

  • docker node add --label
  • docker node update --set-label
  • docker node update --label-add
  • docker node modify --set-label

Answer : docker node update --label-add

You have just executed 'docker swarm leave' on a node. What command can be run on the same node to confirm it has left the cluster?


Options are :

  • docker system info
  • docker node status
  • docker system status
  • docker node ls

Answer : docker system info

Docker Certified Associate (DCA) Practice Exams Set 3

What type of network is ingress network?


Options are :

  • bridge network
  • host network
  • macvlan network
  • overlay network

Answer : overlay network

Which of the following namespaces is disabled by default and must be enabled at Docker engine runtime in order to be used?


Options are :

  • mnt
  • net
  • user
  • pid

Answer : user

Which command interactively monitors all container activity in the Docker engine?


Options are :

  • docker container logs
  • docker system events
  • docker system logs
  • docker container events

Answer : docker system events

Docker Certified Associate (DCA) Practice Exams Set 9

A host machine has four CPUs available and two running containers. The sysadmin would like to assign two CPUs to each container. Which of the following commands achieves this?


Options are :

  • Set the '--cpu-quota' flag to '1.3' on one container and '2,4' on the other container.
  • Set the '--cpuset-cpu's flag to '1.3' on one container and '2.4' on the other container.
  • Set the '--cpuset-cpus' flag to '.5' on both containers
  • Set the '--cpuset-cpus' flag of the 'dockerd' process to the value 'even-spread'

Answer : Set the '--cpuset-cpus' flag to '.5' on both containers

What is the docker run option to publish a port so that an application is accessible externally?


Options are :

  • docker run --publish-port
  • docker run --expose
  • docker run --open-port
  • docker run --publish

Answer : docker run --publish

What is the docker command to display detailed information on one or more networks?


Options are :

  • docker network display
  • docker network status
  • docker network inspect
  • docker inspect network

Answer : docker network inspect

Docker Certified Associate (DCA) Practice Exams Set 25

What docker image prune command does?


Options are :

  • Display detailed information on one or more images
  • Show the history of an image
  • Remove unused images
  • Remove one or more images

Answer : Remove unused images

Which of the following commands will ensure that overlay traffic between service tasks is encrypted?


Options are :

  • docker network create -d overlay -o encrypted=true
  • docker network create -d overlay --secure
  • docker service create --network --secure
  • docker service create --network --encrypted

Answer : docker network create -d overlay -o encrypted=true

What is the docker command to setup a swarm?


Options are :

  • docker init swarm
  • docker swarm create
  • docker swarm init
  • docker create swarm

Answer : docker swarm init

Docker Certified Associate (DCA) Practice Exams Set 4

Which of the following commands is used to display system-wide Docker configuration on a host


Options are :

  • docker status
  • docker system
  • docker info
  • docker inspect

Answer : docker info

What are the two types of docker swarm services?


Options are :

  • replicated and global services
  • distributed and replicated services
  • local and global services
  • replicated and local services

Answer : replicated and global services

What is the endpoint that we can use to check the health of a single UCP manager node?


Options are :

  • https:///_heartbeat
  • https:///_status
  • https:///_health
  • https:///_ping

Answer : https:///_ping

Docker Certified Associate (DCA) Practice Exams Set 26

What is the command that need to be executed to sign an image before pushing it to repository?


Options are :

  • export TRUST_DOCKER_IMAGE=1
  • export DOCKER_CONTENT_TRUST=1
  • export TRUST_DOCKER_CONTENT=1
  • export SIGN_DOCKER_IMAGE=1

Answer : export DOCKER_CONTENT_TRUST=1

Where is the option to integrate Docker Enterprise with LDAP?


Options are :

  • Docker Machine
  • Docker Compose
  • Universal Control Plane
  • Docker Trusted Registry

Answer : Universal Control Plane

What is the docker command to create a container with custom DNS server(s)?


Options are :

  • docker container create --custom-dns=IP_ADDRESS
  • docker container create --add-dns=IP_ADDRESS
  • docker container create --dns=IP_ADDRESS
  • docker container create --set-dns=IP_ADDRESS

Answer : docker container create --dns=IP_ADDRESS

Docker Certified Associate (DCA) Practice Exams Set 25

What is the docker command to backup the UCP?


Options are :

  • docker/ucp backup
  • docker backup ucp

Answer : docker/ucp backup

What is the docker command to see container logs?


Options are :

  • docker logs
  • docker debug
  • docker fetch-logs
  • docker dump-logs

Answer : docker logs

What are the two types of UCP client bundles?


Options are :

  • Docker CLI bundles and Docker web UI bundles
  • Admin user certificate bundles and user certificate bundles
  • Docker UCP client bundles and DTR client bundles
  • Ops client bundles and dev client bundles

Answer : Admin user certificate bundles and user certificate bundles

Docker Certified Associate (DCA) Practice Exams Set 8

What is the correct order to backup Docker EE components?


Options are :

  • Back up DTR, UCP, and then swarm
  • Back up swarm, DTR, and then UCP
  • Back up swarm, UCP, and then DTR
  • Back up UCP, swarm, and then DTR

Answer : Back up swarm, UCP, and then DTR

What is the difference between UCP workers and managers?


Options are :

  • ucp-agent service automatically starts serving all UCP components in worker node, and only a proxy service in manager node
  • ucp-agent service automatically starts serving all UCP components in manager node, and only a proxy service in worker node

Answer : ucp-agent service automatically starts serving all UCP components in manager node, and only a proxy service in worker node

Which of the following docker image commands display detailed information on one or more images?


Options are :

  • docker image ls
  • docker image history
  • docker image inspect
  • docker image detail

Answer : docker image inspect

Docker Certified Associate (DCA) Practice Exams Set 25

Which of the following are types of namespaces used by Docker to provide isolation? (Choose 2)


Options are :

  • Authentication
  • Process ID
  • Host
  • Network
  • Storage

Answer : Process ID Network

Which of the following statement is true about secrets?


Options are :

  • Secrets can be created from any node in the cluster
  • Secrets can be created using standard input (STDIN) and a file
  • Secrets can be modified after they are created
  • Secrets are stored unencrypted on manager nodes

Answer : Secrets can be created using standard input (STDIN) and a file

Docker Certified Associate (DCA) Practice Exams Set 6

Which set of commands can identify the publishd port(s) for a container?


Options are :

  • 'docker container inspect', docker port'
  • 'docker port inspect', 'docker container inspect'
  • 'docker network inspect', 'docker port'
  • 'docker info','docker network inspect'

Answer : 'docker container inspect', docker port'

Which of the following is NOT a valid way to tag a Docker image?


Options are :

  • Tag an image referenced by Name and Tag
  • Tag an image referenced by user ID
  • Tag an image referenced by image ID
  • Tag an image referenced by Name

Answer : Tag an image referenced by user ID

When using the Docker client to push an image to a registry, what environment variable is used to instruct the client to perform signing of the image?


Options are :

  • DOCKER_PUSH_SIGN=1
  • DOCKER_IMAGE_SIGN=1
  • NOTARY_ENABLE=1
  • DOCKER_CONTENT_TRUST=1

Answer : DOCKER_CONTENT_TRUST=1

Docker Certified Associate (DCA) Practice Exams Set 6

How do you configure Docker engine to use a registry that is not configured with TLS certificates from a trusted CA?


Options are :

  • Pass the '--insecure-registry' flag to the daemon at run time.
  • Set and export the IGNORE_TLS environment variable on the command line.
  • Set IGNORE_TLS in the 'daemon.json' configuration file.
  • Set INSECURE_REGISTRY in the '/etc/docker/default' configuration file.

Answer : Pass the '--insecure-registry' flag to the daemon at run time.

Which of the Dockerfile options executes any commands in a new layer on top of the current image and commit the results?


Options are :

  • FROM
  • ONBUILD
  • CMD
  • RUN

Answer : RUN

Which of the following is NOT backed up when performing a Docker Trusted backup operation?


Options are :

  • Image blobs
  • DTR configurations
  • Access control to repos and images
  • Repository metadata

Answer : Image blobs

Docker Certified Associate (DCA) Practice Exams Set 6

What service mode is used to deploy a single task of a service to each node?


Options are :

  • Global
  • Universal
  • Distributed
  • Replicated
  • Spread

Answer : Global

What is the image storage solution that is part of Docker Enterprise Edition called?


Options are :

  • Docker Hub
  • Docker Trusted Registry
  • Universal Control Plane
  • Docker Registry

Answer : Docker Trusted Registry

Which of the following docker image commands display detailed information on one or more images?


Options are :

  • docker image history
  • docker image inspect
  • docker image detail
  • docker image ls

Answer : docker image inspect

Docker Certified Associate (DCA) Practice Exams Set 9

What is the recommended way to configure the daemon flags and environment variables for your Docker daemon in a platform independent way?


Options are :

  • Set the configuration options in '/etc/docker/daemon.json'
  • Set the configuration DOCKER_OPTS in '/etc/default/docker'
  • Set the configuration options using the ENV variable
  • Using 'docker config' to set the configuration options.

Answer : Set the configuration options in '/etc/docker/daemon.json'

Which of the following modes can be used for service discovery of a Docker swarm service (Pick 2 correct answers)?


Options are :

  • Virtual IP (VIP) with --endpoint-mode vip
  • Network Address Translation(NAT) with --endpoint-mode nat
  • Ingress with --endpoint-mode ingress
  • Overlay with --endpoint-mode overlay
  • DNS Round-Robin with --endpoint-mode dnsrr

Answer : Virtual IP (VIP) with --endpoint-mode vip DNS Round-Robin with --endpoint-mode dnsrr

What is the default format of docker inspect output?


Options are :

  • yaml
  • json
  • xml
  • html

Answer : json

Docker Certified Associate (DCA) Practice Exams Set 22

What is the function of docker inspect command ?


Options are :

  • To display system-wide information
  • To manage Docker configs
  • To inspect changes to files or directories on a container's filesystem
  • To return low-level information on Docker objects

Answer : To return low-level information on Docker objects

After creating a new service named 'http', you notice that the new service is not registering as healthy. How do you view the list of historical tasks for that service by using the command line?


Options are :

  • 'docker inspect http'
  • 'docker service ps http'
  • 'docker service inspect http'
  • 'docker ps http'

Answer : 'docker service inspect http'

Which of the following is supported by control groups?


Options are :

  • Manage certificates
  • Isolate processes in a container
  • Collect net
  • Limit CPU usage within a container

Answer : Limit CPU usage within a container

Docker Certified Associate (DCA) Practice Exams Set 22

Which of the following constitutes a production-ready devicemapper configuration for the docker engine?


Options are :

  • Create a volume group in devicemapper and utilize the '--dm.thinpooldev' Docker daemon option, specifying the volume group.
  • Nothing, devicemapper comes ready for production usage out of the box.
  • Format a partition with the xfs and mount it at '/var/lib/docker'
  • Utilize the '--storage-opt dm.directlvm_device' Docker daemon option, specifying a block device.

Answer : Utilize the '--storage-opt dm.directlvm_device' Docker daemon option, specifying a block device.

The following health check exists in a Dockerfile:

'HEALTCHECK CMD curl --fail http://localhost/health || exit 1'

Which of the following describes its purpose?


Options are :

  • Defines the health check endpoint on the localhost interface for external monitoring tools to monitor the health of the docker engine.
  • Defines the action taken when container health fails, which in this case will kill the container with exit status 1.
  • Defines the health check endpoint on the local host interface for containers to monitor the health of the docker engine.
  • Defines the health check for the containerized application so that the application health can be monitored by the Docker engine.

Answer : Defines the action taken when container health fails, which in this case will kill the container with exit status 1.

Comment / Suggestion Section
Point our Mistakes and Post Your Suggestions
  • Question (last in this Set):
    
    The following health check exists in a Dockerfile:
    'HEALTCHECK CMD curl --fail http://localhost/health || exit 1'
    Which of the following describes its purpose?
    ....
    CORRECT answer: 
    Defines the health check for the containerized application so that the application health can be monitored by the Docker engine.
    Reply