DCA Practice Questions

The Kubernetes yaml shown below describes a clusterIP service.

Is this a correct statement about how this service routes requests?

Solution: Traffic sent to the IP of this service on port 8080 will be routed to port 80 in a random pod with the label aPP: nginx.

Is this a way to configure the Docker engine to use a registry without a trusted TLS certificate?

Solution: Pass the '--insecure-registry' flag to the daemon at run time.

Is this an advantage of multi-stage builds?

Solution: simultaneously creates and tags multiple images

You configure a local Docker engine to enforce content trust by setting the environment variable

DOCKER_CONTENT_TRUST=1.

If myorg/myimage: 1.0 is unsigned, does Docker block this command?

Solution: docker image import myorg/myimage:1.0

Will this command mount the host's '/data' directory to the ubuntu container in read-only mode?

Solution: 'docker run -v /data:/mydata --mode readonly ubuntu'

Will this command mount the host's '/data* directory to the ubuntu container in read-only mode?

Solution. ‘docker run -add-volume /data /mydata -read-only ubuntu'

Does this command create a swarm service that only listens on port 53 using the UDP protocol?

Solution. ‘docker service create -name dns-cache -p 53:53 -constraint networking.protocol.udp=true dns-cache"

In Docker Trusted Registry, is this how a user can prevent an image, such as 'nginx:latest’, from being overwritten by another user with push access to the repository?

Solution: Keep a backup copy of the image on another repository.

Will this command display a list of volumes for a specific container?

Solution:docker volume inspect nginx'

Will this Linux kernel facility limit a Docker container's access to host resources, such as CPU or memory?

Solution: cgroups