DCA PDF Dumps Real 2022 Recently Updated Questions
Released Docker DCA Updated Questions PDF
NEW QUESTION 98
Two development teams in your organization use Kubernetes and want to deploy their applications while ensuring that Kubernetes-specific resources, such as secrets, are grouped together for each application.
Is this a way to accomplish this?
Solution: Create one namespace for each application and add all the resources to it.
- A. No
- B. Yes
Answer: A
NEW QUESTION 99
Which one of the following commands will result in the volume being removed automatically once the container
has exited?
- A. 'docker run --del -v /foo busybox'
- B. 'docker run --rm -v /foo busybox'
- C. 'docker run --read-only -v /foo busybox'
- D. 'docker run --remove -v /foo busybox'
Answer: B
NEW QUESTION 100
Your organization has a centralized logging solution, such as Splunk.
Will this configure a Docker container to export container logs to the logging solution?
Solution: docker logs <container-id>
- A. No
- B. Yes
Answer: A
NEW QUESTION 101
Following the principle of least privilege, which of the following methods can be used to securely grnt access to the specific user to communicate to a Docker engine? (Choose two.)
- A. Add the user to the 'docker' group on the server or specify the groue with the '--group' Docker daemon option.
- B. Utilize the '--host 0.0.0.0:2375' option to the Docker daemon to listen on port 2375 over TCP on all interfaces
- C. Utilize openssl to create TLS client and server certificates, configuring the Docker engine to use with mutual TLS over TCP.
- D. Give the user root access to the server to allow them to run Docker commands as root.
- E. Utilize the '--host 127.0.0.1:2375' option to the Docker daemon to listen on port 2375 over TCP on localhost
Answer: A,C
NEW QUESTION 102
Is this a Linux kernel namespace that is disabled by default and must be enabled at Docker engine runtime to be used?
Solution: mnt
- A. No
- B. Yes
Answer: A
NEW QUESTION 103
Which of the following commands is used to display system-wide Docker configuration on a host?
- A. docker system
- B. docker inspect
- C. docker status
- D. docker info
Answer: D
NEW QUESTION 104
The output of which command can be used to find the architecture and operating system an image is
compatible with?
- A. docker image inspect --filter {{.Architecture}} {{.OS}} ' <image-id>
- B. docker image inspect --format {{.Architecture}} {{.OS}} ' <image-id>
- C. docker image ls <image-id>
- D. docker image info <image-id>
Answer: B
NEW QUESTION 105
In Docker Trusted Registry, how would a user prevent an image, for example 'nginx:latest' from being overwritten by another user with push access to the repository?
- A. Use the DTR web UI to make the tag immutable.
- B. Keep a backup copy of the image on another repository.
- C. Tag the image with 'nginx:immutable'
- D. Remove push access from all other users.
Answer: A
NEW QUESTION 106
You created a new service named 'http' and discover it is not registering as healthy. Will this command enable you to view the list of historical tasks for this service?
Solution: 'docker service ps http'
- A. No
- B. Yes
Answer: A
NEW QUESTION 107
Will this command display a list of volumes for a specific container?
Solution: docker container logs nginx --volumes'
- A. No
- B. Yes
Answer: A
NEW QUESTION 108
Will this command list all nodes in a swarm cluster from the command line?
Solution: 'docker swarm nodes'
- A. No
- B. Yes
Answer: A
NEW QUESTION 109
Which of these swarm manager configurations will cause the cluster to be in a lost quorum state?
- A. 1 manager of which 1 is healthy
- B. 4 managers of which 2 are healthy
- C. 3 managers of which 2 are healthy
- D. 5 managers of which 3 are healthy
Answer: B
NEW QUESTION 110
Does this command create a swarm service that only listens on port 53 using the UDP protocol?
Solution: 'docker service create -name dns-cache -p 53:53 -service udp dns-cache'
- A. No
- B. Yes
Answer: A
NEW QUESTION 111
Which of the following constitutes a production-ready devicemapper configuration for the Docker engine?
- A. Create a volume group in devicemapper and utilize the '--dm.thinpooldev' Docker daemon option, specifying the volume group
- B. Nothing, devicemapper comes ready for production usage out of the box
- C. Format a partition with xfs and mount it at '/var/lib/docker'
- D. Utilize the '--storage-opt dm.directlvm_device' Docker daemon option, specifying a block device
Answer: D
Explanation:
Explanation
NEW QUESTION 112
A service 'wordpress' is running using a password string to connect to a non-Dockerized database service. The password string is passed into the 'wordpress' service as a Docker secret. Per security policy, the password on the database was changed. Identity the correct sequence of steps to rotate the secret from the old password to the new password.
- A. Create a new docker secret with the new password. Remove the existing service using 'docker service rm'. Start a new service with the new secret using "--secret=<new password>"
- B. Create a new docker secret with the new password. Trigger a rolling secret update by using the 'docker secret update' command
- C. Create a new docker secret with a new password. Trigger a rolling update of the "wordpress" service, by using "--secret-rm" & "--secret-add" to remove the old secret and add the updated secret.
- D. Trigger an update to the service by using 'docker service update --secret=<new password>'
Answer: C
NEW QUESTION 113
Which of the following commands will create a swarm service which only listens on port 53 using the UDP protocol?
- A. docker service create --name dns-cache -p 53:53 ..constraint
networking.protocol.udp=true dns-cache - B. docker service create --name dns-cache -p 53:53/udp dns-cache
- C. docker service create --name dns-cache -p 53:53 --service udp dns-cache
- D. docker service create --name dns-cache -p 53:53 --udp dns-cache
Answer: B
NEW QUESTION 114
The output of which command can be used to find the architecture and operating system an image is compatible with?
- A. docker image inspect --filter {{.Architecture}} {{.OS}} ' <image-id>
- B. docker image inspect --format {{.Architecture}} {{.OS}} ' <image-id>
- C. docker image ls <image-id>
- D. docker image info <image-id>
Answer: B
NEW QUESTION 115
An application image runs in multiple environments, with each environment using different certificates and ports.
Is this a way to provision configuration to containers at runtime?
Solution: Provision a Docker config object for each environment.
- A. No
- B. Yes
Answer: B
NEW QUESTION 116
Which one of the following commands will show a list of volumes for a specific container?
- A. 'docker volume inspect nginx'
- B. 'docker container inspect nginx'
- C. 'docker volume logs nginx --containers'
- D. 'docker container logs nginx --volumes'
Answer: B
NEW QUESTION 117
Which of the following constitutes a production-ready devicemapper configuration for the Docker engine?
- A. Create a volume group in devicemapper and utilize the '--dm.thinpooldev' Docker daemon
option, specifying the volume group - B. Nothing, devicemapper comes ready for production usage out of the box
- C. Format a partition with xfs and mount it at '/var/lib/docker'
- D. Utilize the '--storage-opt dm.directlvm_device' Docker daemon option, specifying a block
device
Answer: D
NEW QUESTION 118
Does this command create a swarm service that only listens on port 53 using the UDP protocol?
Solution: 'docker service create --name dns-cache -p 53:53/udp dns-cache'
- A. No
- B. Yes
Answer: B
NEW QUESTION 119
You want to provide a configuration file to a container at runtime. Does this set of Kubernetes tools and steps accomplish this?
Solution: Turn the configuration file into a configMap object and mount it directly into the appropriate pod and container using the .spec.containers.configMounts key.
- A. No
- B. Yes
Answer: A
NEW QUESTION 120
You set up an automatic pruning policy on a DTR repository to prune all images using Apache licenses. What effect does this have on images in this repository?
- A. Matching images are untagged once they are older than the pruning threshold set in the repository's Settings tab.
- B. Matching images are untagged during the next prune job, and subsequently deleted once they are older than the pruning threshold set in the repository's Settings tab.
- C. Matching Images are untagged during the next prune job.
- D. Matching images are deleted during the next prune Job.
Answer: A
NEW QUESTION 121
Which of the following is true about overlay networks?
- A. Overlay networks are created on all cluster nodes when you create the overlay network.
- B. Overlay networks are only created on the manager nodes.
- C. Overlay networks are created only on the manager node that you created the overlay
networking on - D. Overlay networks are first created on the manager nodes. Then they are created on the
worker nodes once a task is scheduled on the specific worker node.
Answer: A
NEW QUESTION 122
A docker service 'web' is running with a scale factor of 1 (replicas = 1).
Bob intends to use the command 'docker service update --replicas=3 web'.
Alice intends to use the command 'docker service scale web=3'.
How do the outcomes oft these two commands differ?
- A. Bob's command updates the number of replicas of the 'web' service to 3. Alice's command results in an error.
- B. Both Bob's and Alice's commands result in exactly the same outcome, which is 3 instances of the 'web' service.
- C. Bob's command results in an error. Alice's command updates the number of replicas of the 'web' service to 3.
- D. Bob's command only updates the service definition, but no new replicas are started. Alice's command results in the actual scaling up of the 'web' service.
Answer: B
NEW QUESTION 123
......
DCA Dumps and Practice Test (170 Exam Questions): https://freecert.test4sure.com/DCA-exam-materials.html