Free Docker DCA Exam Dumps and DCA Exam Questions

Question No: 11

MultipleChoice

Following the principle of least privilege, which of the following methods can be used to securely grnt access to the specific user to communicate to a Docker engine? (Choose two.)

Options

AUtilize the '--host 0.0.0.0:2375' option to the Docker daemon to listen on port 2375 over
TCP on all interfaces

BUtilize openssl to create TLS client and server certificates, configuring the Docker engine to
use with mutual TLS over TCP.

CUtilize the '--host 127.0.0.1:2375' option to the Docker daemon to listen on port 2375 over
TCP on localhost

DGive the user root access to the server to allow them to run Docker commands as root.

EAdd the user to the 'docker' group on the server or specify the grou with the '--group' Docker daemon option.

Question No: 12

MultipleChoice

Which of the following are types of namespaces used by Docker to provide isolation? (Choose 2.)

Options

AHost

BNetwork

CProcess ID

DAuthentication

EStorage

Question No: 13

MultipleChoice

Which of the following namespaces is disabled by default and must be enabled at Docker engine runtime in order to be used?

Options

Auser

Bpid

Cnet

Dmnt

Question No: 14

MultipleChoice

Which of the following statements is true about secrets?

Options

ASecrets can be created from any node in the cluster.

BSecrets can be modified after they are created.

CSecret are stored unencrypted on manager nodes.

DSecrets can be created using standard input (STDIN) and a file.

Question No: 15

MultipleChoice

A server is running low on disk space. What command can be used to check the disk usage of images,

containers, and volumes for Docker engine?

Options

A'docker system df'

B'docker system prune'

C'docker system free'

D'docker system ps'

Question No: 16

MultipleChoice

During development of an application meant to be orchestrated by Kubemetes, you want to mount the /data directory on your laptop into a container.

Will this strategy successfully accomplish this?

Solution. Create a Persistent VolumeClaim requesting storageClass:'''' (which defaults to local storage) and hostPath and use this to populate a volume in a pod.

Options

AYes

BNo

Question No: 17

MultipleChoice

In the context of a swarm mode cluster, does this describe a node?

Solution: a virtual machine participating in the swarm

Options

AYes

BNo

Question No: 18

MultipleChoice

Will this command display a list of volumes for a specific container?

Solution: docker container logs nginx --volumes'

Options

AYes

BNo

Question No: 19

MultipleChoice

A container named 'analytics' that stores results in a volume called 'data' was created.

docker run -d --name=analytics -v data:/data app1

How are the results accessed in 'data' with another container called 'app2'?

Options

Adocker run -d --name=reports --volume=data app2

Bdocker run -d --name=reports --volumes-from=analytics app2

Cdocker run -d --name=reports --volume=app1 app2

Ddocker run -d --name=reports --mount=app1 app2

Question No: 20

MultipleChoice

Which of the following constitutes a production-ready devicemapper configuration for the Docker engine?

Options

ACreate a volume group in devicemapper and utilize the '--dm.thinpooldev' Docker daemon
option, specifying the volume group

BFormat a partition with xfs and mount it at '/var/lib/docker'

CUtilize the '--storage-opt dm.directlvm_device' Docker daemon option, specifying a block
device

DNothing, devicemapper comes ready for production usage out of the box

Free Docker DCA Exam Dumps - Page 2