Docker DCA Practice Test Pdf Exam Material [Q48-Q72]

DCA Docker

admin • November 1, 2022

Docker DCA Practice Test Pdf Exam Material [Q48-Q72]

4.5/5 - (4 votes)

Docker DCA Practice Test Pdf Exam Material

DCA Answers DCA Free Demo Are Based On The Real Exam

Docker Certified Associate Certification Path

Docker Certified Associate Exam is associate level Certification.
It is strongly recommended that aspirants for this exam should have a foundational level of knowledge about Docker containerization technology.

The benefit of obtaining the Docker Certified Associate Exam Certification

DCA Exam provide proven knowledge to use the tools to complete the task efficiently and cost-effectively than the other non-certified professionals lack in doing so.
DCA credential delivers higher earning potential and increased promotion opportunities because it shows a good understanding of Docker containerization technology.
DCA Certifications provide opportunities to get a job easily in which they are interested in instead of wasting years and ending without getting any experience.
This accreditation is a portable proof of skills in containerization technology.
This certification will be judging your skills and knowledge on your understanding of Docker containerization technology concepts & Understanding of how to operate on Docker.

NO.48 You created a new service named ‘http’ and discover it is not registering as healthy. Will this command enable you to view the list of historical tasks for this service?
Solution: ‘docker service inspect http’

Yes

NO.49 Is this a type of Linux kernel namespace that provides container isolation?
Solution: Authentication

Yes

NO.50 The following health check exists in a Dockerfile:
‘HEALTCHECK CMD curl –fail http://localhost/health || exit 1’
Which of the following describes its purpose?

Defines the action taken when container health fails, which in this case will kill the container with exit status 1

Defines the health check endpoint on the localhost interface for external monitoring tools to monitor the health of the docker engine.

Defines the health check endpoint on the local host interface for containers to monitor the health of the docker engine.

Defines the health check for the containerized application so that the application health can be monitored by the Docker engine

NO.51 What is the difference between the ADD and COPY dockerfile instructions? (choosen 2)

ADD supports compression format handling while COPY does not.

COPY supports regular expression handling while ADD does not.

COPY supports compression format handling while ADD does not.

ADD support remote URL handling while COPY does not.

ADD supports regular expression handling while COPY does not.

NO.52 Two development teams in your organization use Kubernetes and want to deploy their applications while ensuring that Kubernetes-specific resources, such as secrets, are grouped together for each application.
Is this a way to accomplish this?
Solution: Create one namespace for each application and add all the resources to it.

Yes

NO.53 Will this command display a list of volumes for a specific container?
Solution: docker container logs nginx –volumes’

Yes

NO.54 Which of these swarm manager configurations will cause the cluster to be in a lost quorum state?

4 managers of which 2 are healthy

1 manager of which 1 is healthy

3 managers of which 2 are healthy

5 managers of which 3 are healthy

NO.55 Will this command display a list of volumes for a specific container?
Solution: ‘docker container inspect nginx’

Yes

NO.56 Does this command display all the pods in the cluster that are labeled as ‘env: development’?
Solution: ‘kubectl get pods –all-namespaces -label env=development’

Yes

NO.57 In the context of a swarm mode cluster, does this describe a node?
Solution: an instance of the Docker engine participating in the swarm

Yes

NO.58 Does this command create a swarm service that only listens on port 53 using the UDP protocol?
Solution: ‘docker service create –name dns-cache -p 53:53/udp dns-cache’

Yes

NO.59 What is the purpose of multi-stage builds?

Better logical separation of Dockerfile instructions for better readability

Optimizing images by copying artifacts selectively from previous stages

Better caching when building Docker images

Faster image builds by allowing parallel execution of Docker builds

NO.60 The Kubernetes yaml shown below describes a networkPolicy.

Will the networkPolicy BLOCK this traffic?
Solution: a request issued from a pod lacking the tier: api label, to a pod bearing the tier: backend label

Yes

NO.61 Which of the following commands starts a Redis container and configures it to always restart unless it is explicitly stopped or Docker is restarted?

‘docker run -d –restart-policy unless-stopped redis’

‘docker run -d –restart omit-stopped redis’

‘docker run -d –restart unless-stopped redis’

‘docker run -d –failure omit-stopped redis’

NO.62 You are running only Kubernetes workloads on a worker node that requires maintenance, such as installing patches or an OS upgrade
Which command must be run on the node to gracefully terminate all pods on the node, while marking the node as unschedulable?

‘docker node update –availability drain <node name>’

‘docker swarm leave’

‘kubectl drain <node name>’

‘kubectl cordon <node name>’

NO.63 Following the principle of least privilege, which of the following methods can be used to securely grnt access to the specific user to communicate to a Docker engine? (Choose two.)

Utilize the ‘–host 0.0.0.0:2375’ option to the Docker daemon to listen on port 2375 over
TCP on all interfaces

Utilize openssl to create TLS client and server certificates, configuring the Docker engine to
use with mutual TLS over TCP.

Utilize the ‘–host 127.0.0.1:2375’ option to the Docker daemon to listen on port 2375 over
TCP on localhost

Give the user root access to the server to allow them to run Docker commands as root.

Add the user to the ‘docker’ group on the server or specify the grouè with the ‘–group’ Docker daemon option.

NO.64 You are pulling images from a Docker Trusted Registry installation configured to use self-signed certificates, and this error appears:
‘x509: certificate signed by unknown authority’.
You already downloaded the Docker Trusted Registry certificate authority certificate from https://dtr.example.com/ca.
How do you trust it? (Select two.)

Place the certificate in ‘/etc/docker/dtr/dtr.example.com.crt’ and restart the Docker daemon on all cluster nodes.

Place the certificate in your OS certificate path, trust the certificate system-wide, and restart the Docker daemon across all cluster nodes.

Pass ‘-trust-certificate ca.crt’ to the Docker client.

Pass –insecure-registry to the Docker client.

Place the certificate in ‘/etc/docker/certs.d/dtr.example com/ca.crt’ on all cluster nodes.

NO.65 Is this the purpose of Docker Content Trust?
Solution: Verify and encrypt Docker registry TLS.

Yes

NO.66 Which statement is true?

CMD shell format uses this form [“param”, param”, “param”]

ENTRYPOINT cannot be used in conjuction with CMD

CMD is used to run the software is the image along with any arguments

ENTRYPOINT cannot be overriden in the “docker container run” command

NO.67 What is the docker command to find the current logging driver for a running container?

docker stats

docker info

docker config

docker inspect

NO.68 Which of the following statements is true about secrets?

Secrets can be created from any node in the cluster.

Secrets can be modified after they are created.

Secret are stored unencrypted on manager nodes.

Secrets can be created using standard input (STDIN) and a file.

NO.69 Will this action upgrade Docker Engine CE to Docker Engine EE?
Solution: Delete ‘/var/lib/docker’ directory.

Yes

NO.70 A Kubernetes node is allocated a /26 CIDR block (64 unique IPs) for its address space.
If every pod on this node has exactly two containers in it, how many pods can this address space support on this node?

32 In every Kubernetes namespace

64 for every service routing to pods on this node

NO.71 Which of the following is supported by control groups?

Manage certificates

Collect net

Limit CPU usage within a container

Isolate processes in a container

NO.72 Which of the following are types of namespaces used by Docker to provide isolation? (Choose 2.)

Authentication

Process ID

Storage

Network