[Sep 14, 2021] DCA PDF Dumps is essential on your DCA Exam Questions Certain Success!
DCA PDF Questions - Perfect Prospect To Go With DCA Practice Exam
NEW QUESTION 81
Which one of the following commands will result in the volume being removed automatically once the container has exited?
- A. 'docker run --del -v /foo busybox'
- B. 'docker run --remove -v /foo busybox'
- C. 'docker run --read-only -v /foo busybox'
- D. 'docker run --rm -v /foo busybox'
Answer: D
NEW QUESTION 82
Is this a function of UCP?
Solution: image role-based access control
- A. No
- B. Yes
Answer: A
NEW QUESTION 83
Which of the following constitutes a production-ready devicemapper configuration for the Docker engine?
- A. Create a volume group in devicemapper and utilize the '--dm.thinpooldev' Docker daemon
option, specifying the volume group - B. Format a partition with xfs and mount it at '/var/lib/docker'
- C. Nothing, devicemapper comes ready for production usage out of the box
- D. Utilize the '--storage-opt dm.directlvm_device' Docker daemon option, specifying a block
device
Answer: D
NEW QUESTION 84
Is this a type of Linux kernel namespace that provides container isolation?
Solution: Authentication
- A. No
- B. Yes
Answer: B
NEW QUESTION 85
A host machine has four CPUs available and two running containers. The sysadmin would like to assign two CPUs to each container.
Which of the following commands achieves this?
- A. Set the '--cpuset-cpu's flag to '1.3' on one container and '2.4' on the other container.
- B. Set the '--cpuset-cpus' flag of the 'dockerd' process to the value 'even-spread'
- C. Set the '--cpu-quota' flag to '1.3' on one container and '2,4' on the other container.
- D. Set the '--cpuset-cpus' flag to '.5' on both containers
Answer: D
NEW QUESTION 86
Following the principle of least privilege, which of the following methods can be used to securely grnt access to the specific user to communicate to a Docker engine? (Choose two.)
- A. Utilize the '--host 127.0.0.1:2375' option to the Docker daemon to listen on port 2375 over
TCP on localhost - B. Give the user root access to the server to allow them to run Docker commands as root.
- C. Utilize the '--host 0.0.0.0:2375' option to the Docker daemon to listen on port 2375 over
TCP on all interfaces - D. Utilize openssl to create TLS client and server certificates, configuring the Docker engine to
use with mutual TLS over TCP. - E. Add the user to the 'docker' group on the server or specify the grouè with the '--group' Docker daemon option.
Answer: D,E
NEW QUESTION 87
Which flag for a service would allow a container to consume more than 2 GB of memory only when there is no memory contention but would also prevent a container from consuming more than 4GB of memory, in any case?
- A. --memory-swap 4GB --limit-memory 2GB
- B. --limit-memory 2GB --reserve-memory 4GB
- C. --limit-memory 4GB --reserve-memory 2GB
- D. --memory-swap 2GB --limit-memory 4GB
Answer: D
NEW QUESTION 88
What is the difference between the ADD and COPY dockerfile instructions? (choosen 2)
- A. COPY supports regular expression handling while ADD does not.
- B. ADD supports regular expression handling while COPY does not.
- C. ADD support remote URL handling while COPY does not.
- D. COPY supports compression format handling while ADD does not.
- E. ADD supports compression format handling while COPY does not.
Answer: B,C
NEW QUESTION 89
One of several containers in a pod is marked as unhealthy after failing its livenessProbe many times. Is this the action taken by the orchestrator to fix the unhealthy container?
Solution: The unhealthy container is restarted.
- A. No
- B. Yes
Answer: A
NEW QUESTION 90
When seven managers are in a swarm cluster how would they be distributed across three datacenters or availability zones?
- A. 4-2-1
- B. 3-3-1
- C. 3-2-2
- D. 5-1-1
Answer: A
NEW QUESTION 91
Seven managers are in a swarm cluster.
Is this how should they be distributed across three datacenters or availability zones?
Solution: 3-3-1
- A. No
- B. Yes
Answer: A
NEW QUESTION 92
Which of the following is NOT backed up when performing a Docker Trusted backup operation?
- A. Image blobs
- B. DTR configurations
- C. Access control to repos and images
- D. Repository metadata
Answer: A
NEW QUESTION 93
Your organization has a centralized logging solution, such as Splunk.
Will this configure a Docker container to export container logs to the logging solution?
Solution: docker logs <container-id>
- A. No
- B. Yes
Answer: A
NEW QUESTION 94
A company's security policy specifies that development and production containers must run on separate nodes in a given Swarm cluster.
Can this be used to schedule containers to meet the security policy requirements?
Solution: resource reservation
- A. No
- B. Yes
Answer: A
NEW QUESTION 95
Will this command ensure that overlay traffic between service tasks is encrypted?
Solution: docker network create -d overlay -o encrypted=true <network-name>
- A. No
- B. Yes
Answer: B
NEW QUESTION 96
Which of the following commands will ensure that overlay traffic between service tasks is encrypted?
- A. docker service create --network <network-name> --secure <service-name>
- B. docker network create -d overlay --secure <network-name>
- C. docker network create -d overlay -o encrypted=true <network-name>
- D. docker service create --network <network-name> --encrypted <service-name>
Answer: C
NEW QUESTION 97
You add a new user to the engineering organization in DTR.
Will this action grant them read/write access to the engineering/api repository?
Solution: Add the user directly to the list of users with read/write access under the repository's Permissions tab.
- A. No
- B. Yes
Answer: B
NEW QUESTION 98
In Docker Trusted Registry, how would a user prevent an image, for example 'nginx:latest' from being
overwritten by another user with push access to the repository?
- A. Remove push access from all other users.
- B. Use the DTR web UI to make the tag immutable.
- C. Tag the image with 'nginx:immutable'
- D. Keep a backup copy of the image on another repository.
Answer: B
NEW QUESTION 99
Is this a type of Linux kernel namespace that provides container isolation?
Solution: Network
- A. No
- B. Yes
Answer: A
NEW QUESTION 100
Which of the following is supported by control groups?
- A. Isolate processes in a container
- B. Limit CPU usage within a container
- C. Collect net
- D. Manage certificates
Answer: B
NEW QUESTION 101
Will this command mount the host's '/data' directory to the ubuntu container in read-only mode?
Solution: 'docker run -v /data:/mydata --mode readonly ubuntu'
- A. No
- B. Yes
Answer: B
NEW QUESTION 102
Which 'docker run' flag lifts cgroup limitations?
- A. 'docker run --privileged'
- B. 'docker run --cpu-period'
- C. 'docker run --cap-drop'
- D. 'docker run --isolation'
Answer: A
NEW QUESTION 103
An application image runs in multiple environments, and each environment uses different certificates and ports, what is the best practice to deploy the containers?
- A. Create images that contain the specific configuration for every environment.
- B. Create a Dockerfile for each environment, specifying ports and Docker secrets for certificates.
- C. Create a Dockerfile for each environment, specifying ports and ENV variables for certificates.
- D. Create a config file for each environment.
Answer: D
NEW QUESTION 104
......
DCA Exam with Accurate Docker Certified Associate (DCA) Exam PDF Questions: https://www.actualtests4sure.com/DCA-test-questions.html
True Docker Exam Extraordinary Practice For the DCA Exam: https://drive.google.com/open?id=1AdrZEqY-vQuWHY0HzpVK5PwmejCo3hVX
