Free Preparation Discussions
MENU
Docker DCA Exam Questions
- Topic 1: Orchestration: This section of the exam measures the skills of DevOps engineers and covers the configuration and management of Docker Swarm clusters. It includes tasks such as setting up manager and worker nodes, converting containers into services, and manipulating stacks. Candidates must understand the role of templates, inspect and troubleshoot running services, and adjust service scaling and placement using node labels. The section also requires interpreting docker inspect outputs and handling communication between Dockerized applications and legacy systems, emphasizing the importance of quorum in cluster resilience.
- Topic 2: Image Creation, Management, and Registry: This domain assesses cloud infrastructure administrators and focuses on building, managing, and optimizing Docker images. It involves working with Dockerfiles, tagging, and pruning images, as well as understanding image layering and registry usage. Candidates must demonstrate image creation from files, modifications to reduce layers, and the ability to push, pull, and sign images. Registry configuration and management are also included, with tasks involving authentication, search, deletion, and secure access to stored images.
- Topic 3: Installation and Configuration (15%): This section of the exam evaluates the capabilities of cloud infrastructure administrators and addresses Docker engine installation, setup, and configuration across multiple platforms. It includes tasks such as logging driver selection, swarm initialization, error resolution, and user access management. Candidates must demonstrate knowledge of system prerequisites, namespaces, cgroups, and the implementation of secure client-server certificate authentication. It also requires consistent deployment practices for Docker UCP and DTR environments, including backup scheduling and HA configurations.
- Topic 4: Networking: This domain targets DevOps engineers and covers Docker networking fundamentals. It includes creating bridge and overlay networks, publishing ports, diagnosing connectivity issues, and understanding network driver types. Candidates are expected to comprehend the Container Network Model, configure external DNS, and apply HTTP/HTTPS load balancing techniques using Docker EE. Additional topics include evaluating traffic flow between Docker components and distinguishing between different port publishing modes like host and ingress.
- Topic 5: Domain 5: Security: This part of the exam focuses on the knowledge of cloud infrastructure administrators and addresses Docker security configurations and practices. It covers image signing, security scans, Docker Content Trust, and default engine protections. Candidates must configure RBAC settings within UCP, integrate identity systems such as LDAP or Active Directory, and manage UCP client bundles. Understanding MTLS, swarm security defaults, and UCP/DTR certificate usage is essential to meet the requirements of this domain.
- Topic 6: Domain 6: Storage and Volumes: This domain measures the practical storage configuration knowledge of DevOps engineers. It includes selecting appropriate storage drivers based on the OS, configuring devicemapper, and comparing object and block storage. Candidates must understand image layering and its implications on the file system, handle volume configuration for persistent storage, and perform system cleanup of unused images. Cross-node storage usage and differentiating roles between UCP workers and managers are also addressed, along with managing external certificates within UCP and DTR environments.
Free Docker DCA Exam Actual Questions
Note: Premium Questions for DCA were last updated On Aug. 02, 2026 (see below)
Can this set of commands identify the published port(s) for a container?
Solution. 'docker port inspect", docker container inspect"
The set of commandsdocker port inspectanddocker container inspectwill not identify the published port(s) for a container. The reason is that there is no such command asdocker port inspect.The correct command to inspect the port mappings of a container isdocker port1.The commanddocker container inspectcan also show the port mappings of a container, but it will display a lot of other information as well, so it isnot as concise asdocker port2. To identify the published port(s) for a container, you can use either of these commands:
docker port CONTAINERwill list all the port mappings of the container1.
docker port CONTAINER PRIVATE_PORTwill list only the port mapping of the specified private port of the container1.
docker container inspect --format=' { {.NetworkSettings.Ports}}' CONTAINERwill list only the port mappings of the container in a JSON format23.
For example, if you have a container namedwebthat publishes port 80 to port 8080 on the host, you can use any of these commands to identify the published port:
$ docker port web
80/tcp -> 0.0.0.0:8080
$ docker port web 80
0.0.0.0:8080
$ docker container inspect --format=' { {.NetworkSettings.Ports}}'web
map[80/tcp:[map[HostIp:0.0.0.0 HostPort:8080]]]
:
docker port
docker container inspect
How can I grab exposed port from inspecting docker container?
Will this action upgrade Docker Engine CE to Docker Engine EE?
Solution: Delete '/var/lib/docker' directory.
Deleting the/var/lib/dockerdirectory will not upgrade Docker Engine CE to Docker Engine EE. It will only remove all the data stored by Docker, such as images, containers, volumes, and networks. This can cause data loss and disrupt the running services. To upgrade from Docker Engine CE to Docker Engine EE, you need to follow the official instructions from Docker, which involve uninstalling the CE package and installing the EE package. You also need to have a valid license to use Docker Engine EE.Reference:
Upgrading Docker CE to EE for the Impatient --- Part I
Install Docker Engine
Moving from docker ce to docker-EE - Stack Overflow
Will this command display a list of volumes for a specific container?
Solution:docker volume inspect nginx'
= The commanddocker volume inspect nginxwill not display a list of volumes for a specific container.This is becausedocker volume inspectexpects one or more volume names as arguments, nota container name1.To display a list of volumes for a specific container, you can use thedocker inspectcommand with the--formatoption and a template that extracts the volume information fromthe container JSON output2. For example, to display the source and destination of the volumes mounted by the containernginx, you can use the following command:
docker inspect --format=' { {range .Mounts}} { {.Source}}: { {.Destination}} { {end}}' nginx
:
docker volume inspect | Docker Docs
docker inspect | Docker Docs
Will a DTR security scan detect this?
Solution: licenses for known third party binary components
A DTR security scan will detect licenses for known third party binary components.This is because DTR security scan uses a database of vulnerabilities and licenses that is updated regularly from Docker Server1.DTR security scan can identify the components and versions of the software packages that are present in the image layers, and report any known vulnerabilities or licenses associated with them2.This can help users to comply with the licensing requirements and avoid potential legal issues3.Reference:
Set up vulnerability scans | Docker Docs
Scan images for vulnerabilities | Docker Docs
Container Security 101 --- Scanning images for Vulnerabilities
Does this command display all the pods in the cluster that are labeled as 'env: development'?
Solution: 'kubectl get pods -I env=development'
The command 'kubectl get pods -I env=development' willnotdisplay all the pods in the cluster that are labeled as 'env: development'.This is because the -I flag isnota valid option for kubectl get pods1.The correct flag to use is --selector or -l, which allows you to filter pods by labels2. Therefore, the correct command to display all the pods in the cluster that are labeled as 'env: development' is:
kubectl get pods --selector env=development
or
kubectl get pods -l env=development
:
kubectl Cheat Sheet | Kubernetes
Labels | Kube by Example
I hope this helps you understand the command and the label, and how they work with Kubernetes and pods. If you have any other questions related to Docker, please feel free to ask me.
- Select Question Types you want
- Set your Desired Pass Percentage
- Allocate Time (Hours : Minutes)
- Create Multiple Practice tests with Limited Questions
- Customer Support
Joseph Bailey
4 days agoAndrew Robinson
23 days agoMelissa Smith
1 month agoBao Zhang
2 months agoAnthony Harris
2 months agoAnthony Moore
3 months agoDonald Adams
4 months agoPatricia Robinson
3 months agoSteven Hall
3 months agoCynthia Rivera
3 months agoMonica Parker
3 months agoAmy Carter
3 months agoRebbecca
4 months agoDestiny
4 months agoSkye
5 months agoJade
5 months agoLarae
5 months agoSuzan
5 months agoIzetta
6 months agoKara
6 months agoNoel
6 months agoJennie
6 months agoAlonzo
7 months agoElinore
7 months agoChantell
7 months agoMakeda
7 months agoFreeman
8 months agoKristeen
8 months agoNickolas
8 months agoElvis
8 months agoStefany
9 months agoRozella
9 months agoGlory
9 months agoKris
9 months agoKenneth
10 months agoJacinta
10 months agoIlene
10 months agoRoy
10 months agoElouise
11 months agoFidelia
11 months agoMaryrose
11 months agoDoretha
11 months agoGracia
1 year agoEzekiel
1 year agoJennifer
1 year agoCandida
1 year agoMichell
1 year agoKaitlyn
1 year agoAide
1 year agoAn
1 year agoHuey
1 year agoAlba
1 year agoLynelle
1 year agoBrynn
2 years agoThomasena
2 years agoAileen
2 years agoRosita
2 years agoGracia
2 years agoTalia
2 years agoLilli
2 years agoRory
2 years agoLorean
2 years agoTwana
2 years agoZona
2 years agoJestine
2 years agoJusta
2 years agoVilma
2 years agoCecilia
2 years agoRebbecca
2 years agoCarin
2 years agoCassie
2 years agoLashaunda
2 years agoChun
2 years agoJose
2 years agoBrittni
2 years agoDaniela
2 years agoHerminia
2 years agoCorazon
2 years agoFrancoise
2 years agoThea
2 years agoFannie
2 years agoGermaine
2 years agoSelene
2 years agoKaitlyn
2 years ago