DCA Practice Exam Questions and Answers

Which of the following are types of namespaces used by Docker to provide isolation? (Choose 2.)

Two development teams in your organization use Kubernetes and want to deploy their applications while ensuring that Kubernetes-specific resources, such as secrets, are grouped together for each application.

Is this a way to accomplish this?

Solution: Add all the resources to the default namespace.

Does this command create a swarm service that only listens on port 53 using the UDP protocol?

Solution: ‘docker service create -name dns-cache -p 53:53 -service udp dns-cache'

How do you configure Docker engine to use a registry that is not configured with TLS certificates from a trusted CA?

The Kubernetes yaml shown below describes a clusterIP service.

Is this a correct statement about how this service routes requests?

Solution: Traffic sent to the IP of this service on port 8080 will be routed to port 80 in a random pod with the label aPP: nginx.

What service mode is used to deploy a single task of a service to each node?

Is this a function of UCP?

Solution: scans images to detect any security vulnerability

Will this configuration achieve fault tolerance for managers in a swarm?

Solution: only two managers, one active and one passive.

Is this a Linux kernel namespace that is disabled by default and must be enabled at Docker engine runtime to be used?

Solution: user

You want to provide a configuration file to a container at runtime. Does this set of Kubernetes tools and steps accomplish this?

Solution: Mount the configuration file directly into the appropriate pod and container using the .spec.containers.configMounts key.

Which of the following commands wifi automatically create a volume when a container is started?

You want to create a container that is reachable from its host's network. Does this action accomplish this?

Solution: Use --link to access the container on the bridge network.

Is this the purpose of Docker Content Trust?

Solution: Verify and encrypt Docker registry TLS.

Which one of the following commands will result in the volume being removed automatically once the container

has exited?

Will this command display a list of volumes for a specific container?

Solution: docker volume inspect nginx'

Are these conditions sufficient for Kubernetes to dynamically provision a persistentVolume, assuming there are no limitations on the amount and type of available external storage?

Solution: A default provisioner is specified, and subsequently a persistentVolumeClaim is created.

A persistentVolumeClaim (PVC) is created with the specification storageClass: "", and size requirements that cannot be satisfied by any existing persistentVolume.

Is this an action Kubernetes takes in this situation?

Solution: The PVC remains unbound until a persistentVolume that matches all requirements of the PVC becomes available.

You want to create a container that is reachable from its host's network. Does this action accomplish this?

Solution: Use network attach to access the containers on the bridge network

Will this command mount the host's '/data' directory to the ubuntu container in read-only mode?

Solution: 'docker run --volume /data:/mydata:ro ubuntu'

Will this action upgrade Docker Engine CE to Docker Engine EE?

Solution: Uninstall 'docker-ce' package before installing 'docker-ee' package.

When seven managers are in a swarm cluster how would they be distributed across three datacenters or availability zones?

A users attempts to set the system time from inside a Docker container are unsuccessful. Could this be blocking this operation?

Solution: inter-process communication

A users attempts to set the system time from inside a Docker container are unsuccessful. Could this be blocking this operation?

Solution: Linux capabilities

Following the principle of least privilege, which of the following methods can be used to securely grnt access to the specific user to communicate to a Docker engine? (Choose two.)