Pre-Winter Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 65pass65

Free Docker Certified Associate (DCA) Exam Practice Questions

Exams4sure Dumps

Exam style questions across every DCA domain

Last Update 3 days ago
Total Questions : 191

Start with our free DCA practice questions, carefully crafted to mirror the domains, phrasing, and difficulty of the real Docker Certified Associate exam. Each DCA exam question comes with a detailed rationale that explains not just which answer is correct but why the others fall short. That's how concepts stick. Use the free set to benchmark yourself: identify your Docker weak domains, see where you're losing marks, and build a focused study plan in minutes.

DCA PDF

DCA PDF (Printable)
$54.25
$154.99

DCA Testing Engine

DCA PDF (Printable)
$59.5
$169.99

DCA PDF + Testing Engine

DCA PDF (Printable)
$74.55
$212.99
Question # 1

Will a DTR security scan detect this?

Solution.image configuration poor practices, such as exposed ports or inclusion of compilers in production images

Options:

A.  

Yes

B.  

No

Discussion 0
Question # 2

Does this describe the role of Control Groups (cgroups) when used with a Docker container?

Solution: accounting and limiting of resources

Options:

A.  

Yes

B.  

No

Discussion 0
Question # 3

Will this command mount the host's '/data1directory to the ubuntu container in read-only mode?

Solution. ‘docker run -v /data:/mydata -mode readonly ubuntu'

Options:

A.  

Yes

B.  

No

Discussion 0
Question # 4

Does this command create a swarm service that only listens on port 53 using the UDP protocol?

Solution: 'docker service create --name dns-cache -p 53:53/udp dns-cache'

Options:

A.  

Yes

B.  

No

Discussion 0
Question # 5

You are pulling images from a Docker Trusted Registry installation

configured to use self-signed certificates, and this error appears:

`x509: certificate signed by unknown authority.

You already downloaded the Docker Trusted Registry certificate authority

certificate from https://dtr.example.com/ca.

How do you trust it? (Select two.)

Options:

A.  

Pass '-trust-certificate ca.crt to the Docker client.

B.  

Place the certificate in '/etc/docker/dtr/dtr.example.com.crt' and restart theDocker daemon on all cluster nodes.

C.  

Place the certificate in /etc/docker/certs.d/dtr.example.com/ca.crt' on allcluster nodes.

D.  

Pass -- insecure-registry to the Docker client.

E.  

Place the certificate in your OS certificate path, trust the certificate system-wide, and restart the Docker daemon across all cluster nodes.

Discussion 0
Question # 6

Two pods bear the same label, app: dev.

Will a label selector matching app: dev match both of these pods?

Options:

A.  

Yes, if the pods are in the same Kubernetes namespace as the object bearing the label selector.

B.  

Yes, if the pods are in the same Kubernetes namespace as the object bearing the label selector and both pods were pre-existing when the label selector was declared.

C.  

Yes, if both pods were pre-existing when the label selector was declared.

D.  

Yes, as long as all the containers in those pods are passing their livenessProbes and readinessProbes.

Discussion 0
Question # 7

In Docker Trusted Registry, is this how a user can prevent an image, such as 'nginx:latest’, from being overwritten by another user with push access to the repository?

Solution: Remove push access from all other users.

Options:

A.  

Yes

B.  

No

Discussion 0
Question # 8

You want to mount external storage to a particular filesystem path in a

container in a Kubernetes pod.

What is the correct set of objects to use for this?

Options:

A.  

a persistentVolume in the pod specification, populated with a persistentVolumeClaim which is bound to a volume defined by a storageClass

B.  

a storageClass in the pod's specification, populated with a volume which is bound to a provisioner defined by a persistentVolume

C.  

a volume in the pod specification, populated with a storageClass which is bound to a provisioner defined by a persistentVolume

D.  

a volume in the pod specification, populated with a persistentVolumeClaim bound to a persistentVolume defined by a storageClass

Discussion 0
Question # 9

The Kubernetes yaml shown below describes a clusterIP service.

Question # 9

Is this a correct statement about how this service routes requests?

Solution: Traffic sent to the IP of this service on port 80 will be routed to port 8080 in a random pod with the label app:

nginx.

Options:

A.  

Yes

B.  

No

Discussion 0
Question # 10

Which docker run` flag lifts cgroup limitations?

Options:

A.  

`docker run -privileged

B.  

`docker run -cpu-period

C.  

`docker run -isolation

D.  

`docker run -cap-drop

Discussion 0

Free Exams Sample Questions