DCA exam

A company's security policy specifies that development and production containers must run on separate nodes in a given Swarm cluster. Can this be used to schedule containers to meet the security policy requirements? Solution: label contraintsA . YesB . NoView AnswerAnswer: B

Does this describe the role of Control Groups (cgroups) when used with a Docker container? Solution: accounting and limiting of resourcesA . YesB . NoView AnswerAnswer: B

The Kubernetes yaml shown below describes a clusterIP service. Is this a correct statement about how this service routes requests? Solution: Traffic sent to the IP of this service on port 8080 will be routed to port 80 in a random pod with the label aPP: nginx.A . YesB ....

In Docker Trusted Registry, how would a user prevent an image, for example 'nginx:latest' from being overwritten by another user with push access to the repository?A . Tag the image with 'nginx:immutable'B . Remove push access from all other users.C . Use the DTR web UI to make the tag...

Which of the following commands starts a Redis container and configures it to always restart unless it is explicitly stopped or Docker is restarted?A . 'docker run -d --restart-policy unless-stopped redis'B . 'docker run -d --restart omit-stopped redis'C . 'docker run -d --restart unless-stopped redis'D . 'docker run -d --failure...

Will this action upgrade Docker Engine CE to Docker Engine EE? Solution: Uninstall 'docker-ce' package before installing 'docker-ee' package.A . YesB . NoView AnswerAnswer: A

Is this a function of UCP? Solution: enforces the deployment of signed images to the clusterA . YesB . NoView AnswerAnswer: B

Is this a Linux kernel namespace that is disabled by default and must be enabled at Docker engine runtime to be used? Solution: userA . YesB . NoView AnswerAnswer: A

Which 'docker run' flag lifts cgroup limitations?A . 'docker run --isolation'B . 'docker run --cap-drop'C . 'docker run --privileged'D . 'docker run --cpu-period'View AnswerAnswer: C

Wha is the purpose of Docker Content Trust?A . Signing and verification of image tagsB . Enabling mutual TLS between the Docker client and serverC . Docker registry TLS verification and encryptionD . Indicating an image on Docker Hub is an official imageView AnswerAnswer: A