Docker DCA 問題練習

Question No : 1
Is this a Linux kernel namespace that is disabled by default and must be enabled at Docker engine runtime to be used?
Solution: user

• A.Yes
• B.No

答えを確認する

正解:

Question No : 2
In Docker Trusted Registry, how would a user prevent an image, for example 'nginx:latest' from being overwritten by another user with push access to the repository?

• A.Tag the image with 'nginx:immutable'
• B.Remove push access from all other users.
• C.Use the DTR web UI to make the tag immutable.
• D.Keep a backup copy of the image on another repository.

答えを確認する

正解:

Question No : 3
Which of the following is true about using the '-P' option when creating a new container?

• A.Docker binds each exposed container port to a random port on all the host's interface
• B.Docker gives extended privileges to the container.
• C.Docker binds each exposed container port to a random port on a specified host interface
• D.Docker binds each exposed container port with the same port on the host

答えを確認する

正解:
Explanation:
Controllare

Question No : 4
Is this a Linux kernel namespace that is disabled by default and must be enabled at Docker engine runtime to be used?
Solution: net

• A.Yes
• B.No

答えを確認する

正解:

Question No : 5
Will this configuration achieve fault tolerance for managers in a swarm?
Solution: an odd number of manager nodes, totaling more than two

• A.Yes
• B.No

答えを確認する

正解:

Question No : 6
You have deployed a service to swarm.
Which command uses the Docker CLI to set the number of tasks of the services to 5? (choose 2)

• A.'docker service update --replicas=5 <service-id>'
• B.'docker replica update <service-id>=5'
• C.'docker update service <service-id>=5'
• D.'docker service replicas <service-id>=5'
• E.'docker service scale <service-id> = 5''

答えを確認する

正解:

Question No : 7
In the context of a swarm mode cluster, does this describe a node?
Solution: a physical machine participating in the swarm

• A.Yes
• B.No

答えを確認する

正解:

Question No : 8
Will this sequence of steps completely delete an image from disk in the Docker Trusted Registry?
Solution: Delete the image and delete the image repository from Docker Trusted Registry

• A.Yes
• B.No

答えを確認する

正解:

Question No : 9
A company's security policy specifies that development and production containers must run on separate nodes in a given Swarm cluster.
Can this be used to schedule containers to meet the security policy requirements?
Solution: label contraints

• A.Yes
• B.No

答えを確認する

正解:

Question No : 10
What is the purpose of multi-stage builds?

• A.Better logical separation of Dockerfile instructions for better readability
• B.Optimizing images by copying artifacts selectively from previous stages
• C.Better caching when building Docker images
• D.Faster image builds by allowing parallel execution of Docker builds

答えを確認する

正解:

Question No : 11
An application image runs in multiple environments, and each environment uses different certificates and ports, what is the best practice to deploy the containers?

• A.Create a Dockerfile for each environment, specifying ports and ENV variables for certificates.
• B.Create a Dockerfile for each environment, specifying ports and Docker secrets for certificates.
• C.Create images that contain the specific configuration for every environment.
• D.Create a config file for each environment.

答えを確認する

正解:

Question No : 12
The following Docker Compose file is deployed as a stack:



Is this statement correct about this health check definition?
Solution: Health checks test for app health ten seconds apart. If the test fails, the container will be restarted three times before it gets rescheduled.

• A.Yes
• B.No

答えを確認する

正解:

Question No : 13
A Kubernetes node is allocated a /26 CIDR block (64 unique IPs) for its address space.
If every pod on this node has exactly two containers in it, how many pods can this address space support on this node?

• A.32
• B.32 In every Kubernetes namespace
• C.64 for every service routing to pods on this node
• D.64

答えを確認する

正解:

Question No : 14
Will this action upgrade Docker Engine CE to Docker Engine EE?
Solution: Uninstall 'docker-ce' package before installing 'docker-ee' package.

• A.Yes
• B.No

答えを確認する

正解:

Question No : 15
You are running only Kubernetes workloads on a worker node that requires maintenance, such as installing patches or an OS upgrade
Which command must be run on the node to gracefully terminate all pods on the node, while marking the node as unschedulable?

• A.'docker node update --availability drain <node name>'
• B.'docker swarm leave'
• C.'kubectl drain <node name>'
• D.'kubectl cordon <node name>'

答えを確認する

正解: