Docker DCA Actual Free Exam Questions & Community Discussion
Is this a way to configure the Docker engine to use a registry without a trusted TLS certificate?
Solution. Set INSECURE_REGISTRY in the' /etc/docker/default' configuration file.
Solution. Set INSECURE_REGISTRY in the' /etc/docker/default' configuration file.
Correct Answer: A
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
A company's security policy specifies that development and production containers must run on separate nodes in a given Swarm cluster.
Can this be used to schedule containers to meet the security policy requirements?
Solution: node affinities
Can this be used to schedule containers to meet the security policy requirements?
Solution: node affinities
Correct Answer: A
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Does this command display all the pods in the cluster that are labeled as env; development'?
Solution. 'kubectl gel pods --all-namespaces -I 'env in (development)''
Solution. 'kubectl gel pods --all-namespaces -I 'env in (development)''
Correct Answer: B
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
You want to provide a configuration file to a container at runtime. Does this set of Kubernetes tools and steps accomplish this?
Solution: Turn the configuration file into a configMap object, use it to populate a volume associated with the pod, and mount that file from the volume to the appropriate container and path.
Solution: Turn the configuration file into a configMap object, use it to populate a volume associated with the pod, and mount that file from the volume to the appropriate container and path.
Correct Answer: B
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Two development teams in your organization use Kubernetes and want to deploy their applications while ensuring that Kubernetes-specific resources, such as secrets, are grouped together for each application.
Is this a way to accomplish this?
Solution: Add all the resources to the default namespace.
Is this a way to accomplish this?
Solution: Add all the resources to the default namespace.
Correct Answer: B
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
The Kubernetes yaml shown below describes a networkPolicy.
Will the networkPolicy BLOCK this trafftc?
Solution.a request issued from a pod bearing the tier: api label, to a pod bearing the tier: backend label
Will the networkPolicy BLOCK this trafftc?
Solution.a request issued from a pod bearing the tier: api label, to a pod bearing the tier: backend label
Correct Answer: B
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Will this action upgrade Docker Engine CE to Docker Engine EE?
Solution.Run docker engine activate.
Solution.Run docker engine activate.
Correct Answer: A
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
You are running only Kubernetes workloads on a worker node that requires maintenance, such as installing patches or an OS upgrade.
Which command must be run on the node to gracefully terminate all pods on the node, while marking the node as unschedulable?
Which command must be run on the node to gracefully terminate all pods on the node, while marking the node as unschedulable?
Correct Answer: A
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Is this a type of Linux kernel namespace that provides container isolation?
Solution.Host
Solution.Host
Correct Answer: B
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Will this Linux kernel facility limit a Docker container's access to host resources, such as CPU or memory?
Solution: seccomp
Solution: seccomp
Correct Answer: A
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Will this command mount the host's '/data' directory to the ubuntu container in read-only mode?
Solution: 'docker run --add-volume /data /mydata -read-only ubuntu'
Solution: 'docker run --add-volume /data /mydata -read-only ubuntu'
Correct Answer: B
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Will this command ensure that overlay traffic between service tasks is encrypted?
Solution:docker service create --network --secure
Solution:docker service create --network --secure
Correct Answer: B
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
0
0
0
10