Free Preparation Discussions
MENU
Docker DCA Exam Questions
- Topic 1: Orchestration: This section of the exam measures the skills of DevOps engineers and covers the configuration and management of Docker Swarm clusters. It includes tasks such as setting up manager and worker nodes, converting containers into services, and manipulating stacks. Candidates must understand the role of templates, inspect and troubleshoot running services, and adjust service scaling and placement using node labels. The section also requires interpreting docker inspect outputs and handling communication between Dockerized applications and legacy systems, emphasizing the importance of quorum in cluster resilience.
- Topic 2: Image Creation, Management, and Registry: This domain assesses cloud infrastructure administrators and focuses on building, managing, and optimizing Docker images. It involves working with Dockerfiles, tagging, and pruning images, as well as understanding image layering and registry usage. Candidates must demonstrate image creation from files, modifications to reduce layers, and the ability to push, pull, and sign images. Registry configuration and management are also included, with tasks involving authentication, search, deletion, and secure access to stored images.
- Topic 3: Installation and Configuration (15%): This section of the exam evaluates the capabilities of cloud infrastructure administrators and addresses Docker engine installation, setup, and configuration across multiple platforms. It includes tasks such as logging driver selection, swarm initialization, error resolution, and user access management. Candidates must demonstrate knowledge of system prerequisites, namespaces, cgroups, and the implementation of secure client-server certificate authentication. It also requires consistent deployment practices for Docker UCP and DTR environments, including backup scheduling and HA configurations.
- Topic 4: Networking: This domain targets DevOps engineers and covers Docker networking fundamentals. It includes creating bridge and overlay networks, publishing ports, diagnosing connectivity issues, and understanding network driver types. Candidates are expected to comprehend the Container Network Model, configure external DNS, and apply HTTP/HTTPS load balancing techniques using Docker EE. Additional topics include evaluating traffic flow between Docker components and distinguishing between different port publishing modes like host and ingress.
- Topic 5: Domain 5: Security: This part of the exam focuses on the knowledge of cloud infrastructure administrators and addresses Docker security configurations and practices. It covers image signing, security scans, Docker Content Trust, and default engine protections. Candidates must configure RBAC settings within UCP, integrate identity systems such as LDAP or Active Directory, and manage UCP client bundles. Understanding MTLS, swarm security defaults, and UCP/DTR certificate usage is essential to meet the requirements of this domain.
- Topic 6: Domain 6: Storage and Volumes: This domain measures the practical storage configuration knowledge of DevOps engineers. It includes selecting appropriate storage drivers based on the OS, configuring devicemapper, and comparing object and block storage. Candidates must understand image layering and its implications on the file system, handle volume configuration for persistent storage, and perform system cleanup of unused images. Cross-node storage usage and differentiating roles between UCP workers and managers are also addressed, along with managing external certificates within UCP and DTR environments.
Free Docker DCA Exam Actual Questions
Note: Premium Questions for DCA were last updated On Sep. 18, 2026 (see below)
Is this a function of UCP?
Solution: scans images to detect any security vulnerability
= Scanning images to detect any security vulnerability is a function of UCP.UCP integrates with Docker Trusted Registry (DTR), which is a secure and scalable image storage solution1.DTR has a built-in image scanning feature that checks every layer of every image for known vulnerabilities and displays the results in the UCP web UI2. This helps users to identify and fix any security issues before deploying their applications.UCP also allows users to enforce security policies and only allow running applications that use images that are scanned and free of vulnerabilities3.Reference:
Docker Trusted Registry | Docker Docs
Scan images for vulnerabilities | Docker Docs
Manage images | Docker Docs
One of several containers in a pod is marked as unhealthy after failing its livenessProbe many times. Is this the action taken by the orchestrator to fix the unhealthy container?
Solution: The unhealthy container is restarted.
A liveness probe is a mechanism for indicating your application's internal health to the Kubernetes control plane. Kubernetes uses liveness probes to detect issues within your pods.When a liveness check fails, Kubernetes restarts the container in an attempt to restore your service to an operational state1. Therefore, the action taken by the orchestrator to fix the unhealthy container is to restart it.Reference:
Content trust in Docker | Docker Docs
Docker Content Trust: What It Is and How It Secures Container Images
A Practical Guide to Kubernetes Liveness Probes | Airplane
Can this set of commands identify the published port(s) for a container?
Solution. 'docker port inspect", docker container inspect"
The set of commandsdocker port inspectanddocker container inspectwill not identify the published port(s) for a container. The reason is that there is no such command asdocker port inspect.The correct command to inspect the port mappings of a container isdocker port1.The commanddocker container inspectcan also show the port mappings of a container, but it will display a lot of other information as well, so it isnot as concise asdocker port2. To identify the published port(s) for a container, you can use either of these commands:
docker port CONTAINERwill list all the port mappings of the container1.
docker port CONTAINER PRIVATE_PORTwill list only the port mapping of the specified private port of the container1.
docker container inspect --format=' { {.NetworkSettings.Ports}}' CONTAINERwill list only the port mappings of the container in a JSON format23.
For example, if you have a container namedwebthat publishes port 80 to port 8080 on the host, you can use any of these commands to identify the published port:
$ docker port web
80/tcp -> 0.0.0.0:8080
$ docker port web 80
0.0.0.0:8080
$ docker container inspect --format=' { {.NetworkSettings.Ports}}'web
map[80/tcp:[map[HostIp:0.0.0.0 HostPort:8080]]]
:
docker port
docker container inspect
How can I grab exposed port from inspecting docker container?
Will this action upgrade Docker Engine CE to Docker Engine EE?
Solution: Delete '/var/lib/docker' directory.
Deleting the/var/lib/dockerdirectory will not upgrade Docker Engine CE to Docker Engine EE. It will only remove all the data stored by Docker, such as images, containers, volumes, and networks. This can cause data loss and disrupt the running services. To upgrade from Docker Engine CE to Docker Engine EE, you need to follow the official instructions from Docker, which involve uninstalling the CE package and installing the EE package. You also need to have a valid license to use Docker Engine EE.Reference:
Upgrading Docker CE to EE for the Impatient --- Part I
Install Docker Engine
Moving from docker ce to docker-EE - Stack Overflow
Will this command display a list of volumes for a specific container?
Solution:docker volume inspect nginx'
= The commanddocker volume inspect nginxwill not display a list of volumes for a specific container.This is becausedocker volume inspectexpects one or more volume names as arguments, nota container name1.To display a list of volumes for a specific container, you can use thedocker inspectcommand with the--formatoption and a template that extracts the volume information fromthe container JSON output2. For example, to display the source and destination of the volumes mounted by the containernginx, you can use the following command:
docker inspect --format=' { {range .Mounts}} { {.Source}}: { {.Destination}} { {end}}' nginx
:
docker volume inspect | Docker Docs
docker inspect | Docker Docs
- Select Question Types you want
- Set your Desired Pass Percentage
- Allocate Time (Hours : Minutes)
- Create Multiple Practice tests with Limited Questions
- Customer Support
Omar Mirza
11 days agoThomas Torres
23 days agoHao Bui
1 month agoJoseph Bailey
2 months agoAndrew Robinson
2 months agoMelissa Smith
3 months agoBao Zhang
3 months agoAnthony Harris
4 months agoAnthony Moore
5 months agoDonald Adams
5 months agoPatricia Robinson
5 months agoSteven Hall
5 months agoCynthia Rivera
5 months agoMonica Parker
5 months agoAmy Carter
5 months agoRebbecca
6 months agoDestiny
6 months agoSkye
6 months agoJade
7 months agoLarae
7 months agoSuzan
7 months agoIzetta
7 months agoKara
8 months agoNoel
8 months agoJennie
8 months agoAlonzo
8 months agoElinore
9 months agoChantell
9 months agoMakeda
9 months agoFreeman
9 months agoKristeen
9 months agoNickolas
10 months agoElvis
10 months agoStefany
10 months agoRozella
10 months agoGlory
11 months agoKris
11 months agoKenneth
11 months agoJacinta
12 months agoIlene
12 months agoRoy
12 months agoElouise
1 year agoFidelia
1 year agoMaryrose
1 year agoDoretha
1 year agoGracia
1 year agoEzekiel
1 year agoJennifer
1 year agoCandida
1 year agoMichell
1 year agoKaitlyn
1 year agoAide
1 year agoAn
2 years agoHuey
2 years agoAlba
2 years agoLynelle
2 years agoBrynn
2 years agoThomasena
2 years agoAileen
2 years agoRosita
2 years agoGracia
2 years agoTalia
2 years agoLilli
2 years agoRory
2 years agoLorean
2 years agoTwana
2 years agoZona
2 years agoJestine
2 years agoJusta
2 years agoVilma
2 years agoCecilia
2 years agoRebbecca
2 years agoCarin
2 years agoCassie
2 years agoLashaunda
2 years agoChun
2 years agoJose
2 years agoBrittni
2 years agoDaniela
2 years agoHerminia
2 years agoCorazon
2 years agoFrancoise
2 years agoThea
2 years agoFannie
2 years agoGermaine
2 years agoSelene
2 years agoKaitlyn
2 years ago