Docker dca practice test

Docker Certified Associate Exam Exam


Question 1

Which statement is correct about cluster management in Docker Enterprise Edition 3.x?

  • A. Clusters can contain Windows 10 and Windows Server 2016 only.
  • B. Clusters can contain Linux, Windows Server 2016 and 2019, and Linux on IBM z Systems.
  • C. Clusters can contain Linux only.
  • D. Clusters can contain Linux and Windows Server 2008 R2 only.
Answer:

A

Discussions
0 / 600

Question 2

Two pods bear the same label, app: dev.
Will a label selector matching app: dev match both of these pods?

  • A. Yes, as long as all the containers in those pods are passing their livenessProbes and readinessProbes.
  • B. Yes, if both pods were pre-existing when the label selector was declared.
  • C. Yes, if the pods are in the same Kubernetes namespace as the object bearing the label selector
  • D. Yes, if the pods are in the same Kubernetes namespace as the object bearing the label selector and both pods were preexisting when the label selector was declared.
Answer:

D

Discussions
0 / 600

Question 3

Which 'docker run' flag lifts cgroup limitations?

  • A. 'docker run --isolation'
  • B. 'docker run --cap-drop'
  • C. 'docker run --privileged'
  • D. 'docker run --cpu-period'
Answer:

C

Discussions
0 / 600

Question 4

Which networking drivers allow you to enable multi-host network connectivity between containers?

  • A. macvlan, ipvlan, and overlay
  • B. bridge, user-defined, host
  • C. bridge, macvlan, ipvlan, overlay
  • D. host, macvlan, overlay, user-defined
Answer:

A

Discussions
0 / 600

Question 5

You are pulling images from a Docker Trusted Registry installation configured to use self-signed
certificates, and this error appears:
'x509: certificate signed by unknown authority'.
You already downloaded the Docker Trusted Registry certificate authority certificate from
https://dtr.example.com/ca
.
How do you trust it? (Select two.)

  • A. Place the certificate in '/etc/docker/dtr/dtr.example.com.crt' and restart the Docker daemon on all cluster nodes.
  • B. Place the certificate in your OS certificate path, trust the certificate system-wide, and restart the Docker daemon across all cluster nodes.
  • C. Pass '-trust-certificate ca.crt' to the Docker client.
  • D. Pass --insecure-registry to the Docker client.
  • E. Place the certificate in '/etc/docker/certs.d/dtr.example com/ca.crt' on all cluster nodes.
Answer:

DE

Discussions
0 / 600

Question 6

You set up an automatic pruning policy on a DTR repository to prune all images using Apache
licenses. What effect does this have on images in this repository?

  • A. Matching images are untagged once they are older than the pruning threshold set in the repository's Settings tab.
  • B. Matching Images are untagged during the next prune job.
  • C. Matching images are deleted during the next prune Job.
  • D. Matching images are untagged during the next prune job, and subsequently deleted once they are older than the pruning threshold set in the repository's Settings tab.
Answer:

A

Discussions
0 / 600

Question 7

Some Docker images take time to build through a Continuous Integration environment. You want to
speed up builds and take advantage of build caching.
Where should the most frequently changed part of a Docker image be placed in a Dockerfile?

  • A. at the bottom of the Dockerfile
  • B. after the FROM directive
  • C. at the top of the Dockerfile
  • D. in the ENTRYPOINT directive
Answer:

A

Discussions
0 / 600

Question 8

A Kubernetes node is allocated a /26 CIDR block (64 unique IPs) for its address space.
If every pod on this node has exactly two containers in it, how many pods can this address space
support on this node?

  • A. 32
  • B. 32 In every Kubernetes namespace
  • C. 64 for every service routing to pods on this node
  • D. 64
Answer:

C

Discussions
0 / 600

Question 9

You are running only Kubernetes workloads on a worker node that requires maintenance, such as
installing patches or an OS upgrade
Which command must be run on the node to gracefully terminate all pods on the node, while
marking the node as unschedulable?

  • A. 'docker node update --availability drain <node name>'
  • B. 'docker swarm leave'
  • C. 'kubectl drain <node name>'
  • D. 'kubectl cordon <node name>'
Answer:

D

Discussions
0 / 600

Question 10

When an application being managed by UCP fails, you would like a summary of all requests made to
the UCP API in the hours leading up to the failure.
What must be configured correctly beforehand for this to be possible?

  • A. UCP audit logs must be set to the metadata' or request' level.
  • B. UCP logging levels must be set to the info' or debug' level.
  • C. All engines in the cluster must have their log driver set to the metadata' or request' level.
  • D. Set the logging level in theconfig object for the ucp-kube-api-server container to warning or higher.
Answer:

A

Discussions
0 / 600
To page 2