How Many Questions Of DCA Pdf

NEW QUESTION 1
A user is having problems running Docker. Which of the following will start Docker in debug mode?

• A. Set the debug key to true in the 'daemon.json' file.
• B. Start the 'dockerd' process manually with the '--logging' flag set to debug
• C. Set the logging key to debug in the 'daemon.json' file.
• D. Start the 'dockerd' process manually with the '--raw-logs' flag set to debug

Answer: A

NEW QUESTION 2
Which statement is true about DTR garbage collection?

• A. Garbage collection removes unreferenced image layers from DTR's backend storage.
• B. Garbage collection removes exited containers from cluster nodes.
• C. Garbage collection removes DTR images that are older than a configurable of days
• D. Garbage collection removes unused volumes from cluster nodes

Answer: A

NEW QUESTION 3
In Docker Trusted Registry, how would a user prevent an image, for example 'nginx:latest' from being overwritten by another user with push access to the repository?

• A. Tag the image with 'nginx:immutable'
• B. Remove push access from all other users.
• C. Use the DTR web UI to make the tag immutable.
• D. Keep a backup copy of the image on another repository.

Answer: C

NEW QUESTION 4
The following health check exists in a Dockerfile: 'HEALTCHECK
CMD curl --fail http://localhost/health || exit 1 '
Which of the following describes its purpose?

• A. Defines the action taken when container health fails, which in this case will kill the container with exit status 1
• B. Defines the health check endpoint on the localhost interface for external monitoring tools to monitor the health of the docker engine.
• C. Defines the health check endpoint on the local host interface for containers to monitor the health of the docker engine.
• D. Defines the health check for the containerized application so that the application health can be monitored by the Docker engine

Answer: A

NEW QUESTION 5
A server is running low on disk space. What command can be used to check the disk usage of images, containers, and volumes for Docker engine?

• A. 'docker system df'
• B. 'docker system prune'
• C. 'docker system free'
• D. 'docker system ps'

Answer: A

NEW QUESTION 6
You have just executed 'docker swarm leave' on a node. What command can be run on the same node to confirm it has left the cluster?

• A. docker node ls
• B. docker system info
• C. docker system status
• D. docker system status

Answer: B

NEW QUESTION 7
Which of the following is NOT backed up when performing a Docker Trusted backup operation?

• A. Access control to repos and images
• B. Repository metadata
• C. Image blobs
• D. DTR configurations

Answer: C

NEW QUESTION 8
When using the Docker client to push an image to a registry, what environment variable is used to instruct the client to perform signing of the image?

• A. DOCKER_CONTENT_TRUST=1
• B. DOCKER_IMAGE_SIGN=1
• C. DOCKER_PUSH_SIGN=1
• D. NOTARY_ENABLE=1Correct

Answer: A

NEW QUESTION 9
Which flag for a service would allow a container to consume more than 2 GB of memory only when there is no memory contention but would also prevent a container from consuming more than 4GB of memory, in any case?

• A. --limit-memory 2GB --reserve-memory 4GB
• B. --limit-memory 4GB --reserve-memory 2GB
• C. --memory-swap 2GB --limit-memory 4GB
• D. --memory-swap 4GB --limit-memory 2GB

Answer: C

NEW QUESTION 10
After creating a new service named 'http', you notice that the new service is not registering as healthy. How do you view the list of historical tasks for that service by using the command line?

• A. 'docker inspect http'
• B. 'docker service inspect http'
• C. 'docker service ps http'
• D. 'docker ps http'

Answer: C

NEW QUESTION 11
When seven managers are in a swarm cluster how would they be distributed across three datacenters or availability zones?

• A. 5-1-1
• B. 3-2-2
• C. 3-3-1
• D. 4-2-1

Answer: B

NEW QUESTION 12
The output of which command can be used to find the architecture and operating system an image is compatible with?

• A. docker image inspect --filter {{.Architecture}} {{.OS}} ' <image-id>
• B. docker image ls <image-id>
• C. docker image inspect --format {{.Architecture}} {{.OS}} ' <image-id>
• D. docker image info <image-id>

Answer: C

NEW QUESTION 13
What behavior is expected when a service is created with the following command: 'docker service create --publish 8000:80 nginx'

• A. All nodes in the cluster will listen on port 8080 and forward to port 80 in the container.
• B. Only a single node in the cluster will listen on port 8080 and forward to port 80 in the container.
• C. All nodes in the cluster will listen on port 80 and forward to port 8080 in the container.
• D. Only a single node in the cluster will listen on port 80 and forward to port 8080 in the container.

Answer: A

NEW QUESTION 14
What is the difference between a resource limit and a resource reservation when scheduling services?

• A. A resource limit and a resource reservation can be used interchangeably.
• B. A resource limit is a soft limit for your service, while a reservation is hard limit and the docker engine will do its best to keep your service at the limit.
• C. A resource limit is used to find a host with adequate resources for scheduling a hard limit for your service, while a reservation is hard limit for your service.
• D. A resource limit is hard limit for your service, while a reservation is used to find a host with adequate resources for schedulin
• E. Correct

Answer: A

NEW QUESTION 15
A service 'wordpress' is running using a password string to connect to a non-Dockerized database service. The password string is passed into the 'wordpress' service as a Docker secret. Per security policy, the password on the database was changed. Identity the correct sequence of steps to rotate the secret from the old password to the new password.

• A. Create a new docker secret with the new passwor
• B. Trigger a rolling secret update by using the 'docker secret update' command
• C. Trigger an update to the service by using 'docker service update --secret=<new password>'
• D. Create a new docker secret with the new passwor
• E. Remove the existing service using 'docker service rm'. Start a new service with the new secret using "--secret=<new password>"
• F. Create a new docker secret with a new passwor
• G. Trigger a rolling update of the "wordpress" service, by using "--secret-rm" & "--secret-add" to remove the old secret and add the updated secret.

Answer: D

NEW QUESTION 16
A container named "analytics" that stores results in a volume called "data" was created. docker run -d --name=analytics -v data:/data app1
How are the results accessed in "data" with another container called "app2"?

• A. docker run -d --name=reports --volume=data app2
• B. docker run -d --name=reports --volumes-from=analytics app2
• C. docker run -d --name=reports --volume=app1 app2
• D. docker run -d --name=reports --mount=app1 app2

Answer: B

NEW QUESTION 17
Which of the following statements is true about secrets?

• A. Secrets can be created from any node in the cluster.
• B. Secrets can be modified after they are created.
• C. Secret are stored unencrypted on manager nodes.
• D. Secrets can be created using standard input (STDIN) and a file.

Answer: D

NEW QUESTION 18
You have created a Docker bridge network on a host with three containers attached, how do you make this containers accessible outside of the host?

• A. Use network attach to access the containers on the bridge network
• B. Use either EXPOSE or --publish to access the containers on the bridge network
• C. Use network connect to access the containers on the bridge network
• D. Use --link to access the containers on the bridge network Correct

Answer: B

NEW QUESTION 19
What is the docker command to setup a swarm?

• A. docker swarm init
• B. docker swarm create
• C. docker init swarm
• D. docker create swarm

Answer: A

Explanation:
Explanation https://docs.docker.com/engine/reference/commandline/swarm/

NEW QUESTION 20
Which of the following commands is used to display system-wide Docker configuration on a host?

• A. docker info
• B. docker status
• C. docker inspect
• D. docker system

Answer: A

NEW QUESTION 21
Which of the following modes can be used for service discovery of a Docker swarm service (Pick 2 correct answers)

• A. Virtual IP (VIP) with --endpoint-mode vip
• B. Overlay with --endpoint-mode overlay
• C. DNS Round-Robin with --endpoint-mode dnsrr
• D. Ingress with --endpoint-mode ingress
• E. Network Address Translation(NAT) with --endpoint-mode nat

Answer: AC

NEW QUESTION 22
Which of the following is true about overlay networks?

• A. Overlay networks are created only on the manager node that you created the overlay networking on
• B. Overlay networks are created on all cluster nodes when you create the overlay network.
• C. Overlay networks are first created on the manager node
• D. Then they are created on the worker nodes once a task is scheduled on the specific worker node.
• E. Overlay networks are only created on the manager nodes.

Answer: B

Explanation:
Explanation

NEW QUESTION 23
Which of these swarm manager configurations will cause the cluster to be in a lost quorum state?

• A. 4 managers of which 2 are healthy
• B. 1 manager of which 1 is healthy
• C. 3 managers of which 2 are healthy
• D. 5 managers of which 3 are healthy

Answer: A

NEW QUESTION 24
......