Unique Top-selling DCA Exams - New 2021 Docker Pratice Exam
Docker Certified Associate Dumps DCA Exam for Full Questions - Exam Study Guide
NEW QUESTION 82
Wha is the purpose of Docker Content Trust?
- A. Indicating an image on Docker Hub is an official image
- B. Signing and verification of image tags
- C. Docker registry TLS verification and encryption
- D. Enabling mutual TLS between the Docker client and server
Answer: B
NEW QUESTION 83
From a DevOps process standpoint, it is best practice to keep changes to an application in version control.
Which of the following will allow changes to a docker Image to be stored in a version control system?
- A. A dockerfile
- B. docker save
- C. docker commit
- D. A docker-compose.yml file
Answer: C
NEW QUESTION 84
From a DevOps process standpoint, it is best practice to keep changes to an application in version control. Which of the following will allow changes to a docker Image to be stored in a version control system?
- A. A dockerfile
- B. docker save
- C. docker commit
- D. A docker-compose.yml file
Answer: C
NEW QUESTION 85
Which of the following commands is used to display system-wide Docker configuration on a host?
- A. docker status
- B. docker info
- C. docker system
- D. docker inspect
Answer: B
NEW QUESTION 86
Is this a Linux kernel namespace that is disabled by default and must be enabled at Docker engine runtime to be used?
Solution: mnt
- A. No
- B. Yes
Answer: A
NEW QUESTION 87
Will this action upgrade Docker Engine CE to Docker Engine EE?
Solution: Delete '/var/lib/docker' directory.
- A. No
- B. Yes
Answer: A
NEW QUESTION 88
You are running only Kubernetes workloads on a worker node that requires maintenance, such as installing patches or an OS upgrade
Which command must be run on the node to gracefully terminate all pods on the node, while marking the node as unschedulable?
- A. 'kubectl cordon <node name>'
- B. 'docker node update --availability drain <node name>'
- C. 'docker swarm leave'
- D. 'kubectl drain <node name>'
Answer: A
NEW QUESTION 89
Which of the following commands starts a Redis container and configures it to always restart unless it is
explicitly stopped or Docker is restarted?
- A. 'docker run -d --restart-policy unless-stopped redis'
- B. 'docker run -d --failure omit-stopped redis'
- C. 'docker run -d --restart omit-stopped redis'
- D. 'docker run -d --restart unless-stopped redis'
Answer: D
NEW QUESTION 90
Which statement is true about DTR garbage collection?
- A. Garbage collection removes DTR images that are older than a configurable of days
- B. Garbage collection removes exited containers from cluster nodes.
- C. Garbage collection removes unreferenced image layers from DTR's backend storage.
- D. Garbage collection removes unused volumes from cluster nodes
Answer: C
NEW QUESTION 91
Which of the following statements is true about secrets?
- A. Secrets can be created from any node in the cluster.
- B. Secret are stored unencrypted on manager nodes.
- C. Secrets can be modified after they are created.
- D. Secrets can be created using standard input (STDIN) and a file.
Answer: D
NEW QUESTION 92
Is this the purpose of Docker Content Trust?
Solution: Verify and encrypt Docker registry TLS.
- A. No
- B. Yes
Answer: B
NEW QUESTION 93
You set up an automatic pruning policy on a DTR repository to prune all images using Apache licenses. What effect does this have on images in this repository?
- A. Matching Images are untagged during the next prune job.
- B. Matching images are deleted during the next prune Job.
- C. Matching images are untagged once they are older than the pruning threshold set in the repository's Settings tab.
- D. Matching images are untagged during the next prune job, and subsequently deleted once they are older than the pruning threshold set in the repository's Settings tab.
Answer: C
NEW QUESTION 94
A company's security policy specifies that development and production containers must run on separate nodes in a given Swarm cluster.
Can this be used to schedule containers to meet the security policy requirements?
Solution: resource reservation
- A. No
- B. Yes
Answer: A
NEW QUESTION 95
The output of which command can be used to find the architecture and operating system an image is
compatible with?
- A. docker image inspect --format {{.Architecture}} {{.OS}} ' <image-id>
- B. docker image ls <image-id>
- C. docker image info <image-id>
- D. docker image inspect --filter {{.Architecture}} {{.OS}} ' <image-id>
Answer: A
NEW QUESTION 96
After creating a new service named 'http', you notice that the new service is not registering as healthy. How do you view the list of historical tasks for that service by using the command line?
- A. 'docker inspect http'
- B. 'docker service inspect http'
- C. 'docker service ps http'
- D. 'docker ps http'
Answer: B
NEW QUESTION 97
What is the difference between the ADD and COPY dockerfile instructions? (choosen 2)
- A. COPY supports regular expression handling while ADD does not.
- B. ADD supports regular expression handling while COPY does not.
- C. ADD support remote URL handling while COPY does not.
- D. COPY supports compression format handling while ADD does not.
- E. ADD supports compression format handling while COPY does not.
Answer: B,C
NEW QUESTION 98
Will this command ensure that overlay traffic between service tasks is encrypted?
Solution: docker network create -d overlay --secure
- A. No
- B. Yes
Answer: A
NEW QUESTION 99
Which one of the following commands will result in the volume being removed automatically once the container has exited?
- A. 'docker run --del -v /foo busybox'
- B. 'docker run --remove -v /foo busybox'
- C. 'docker run --read-only -v /foo busybox'
- D. 'docker run --rm -v /foo busybox'
Answer: D
NEW QUESTION 100
You add a new user to the engineering organization in DTR.
Will this action grant them read/write access to the engineering/api repository?
Solution: Add the user directly to the list of users with read/write access under the repository's Permissions tab.
- A. No
- B. Yes
Answer: B
NEW QUESTION 101
Is this the purpose of Docker Content Trust?
Solution: Enable mutual TLS between the Docker client and server.
- A. No
- B. Yes
Answer: A
NEW QUESTION 102
Which of the following are types of namespaces used by Docker to provide isolation? (Choose 2.)
- A. Authentication
- B. Host
- C. Process ID
- D. Network
- E. Storage
Answer: C,D
NEW QUESTION 103
Can this set of commands identify the published port(s) for a container?
Solution: docker container inspect', 'docker port'
- A. No
- B. Yes
Answer: B
NEW QUESTION 104
Will this Linux kernel facility limit a Docker container's access to host resources, such as CPU or memory?
Solution: namespaces
- A. No
- B. Yes
Answer: A
NEW QUESTION 105
Which 'docker run' flag lifts cgroup limitations?
- A. 'docker run --privileged'
- B. 'docker run --cpu-period'
- C. 'docker run --cap-drop'
- D. 'docker run --isolation'
Answer: A
NEW QUESTION 106
What is the purpose of multi-stage builds?
- A. Optimizing images by copying artifacts selectively from previous stages
- B. Faster image builds by allowing parallel execution of Docker builds
- C. Better logical separation of Dockerfile instructions for better readability
- D. Better caching when building Docker images
Answer: A
NEW QUESTION 107
......
Best way to practice test for Docker DCA: https://www.validbraindumps.com/DCA-exam-prep.html
DCA Dump Ready - Exam Questions and Answers: https://drive.google.com/open?id=1Ojcnfm02t9v_MBcgmx2_evLJx_NDxv0I