DCA Free Practice Test

Which one of the following commands will result in the volume being removed automatically once the container
has exited?

1. A. 'docker run --del -v /foo busybox'
2. B. 'docker run --read-only -v /foo busybox'
3. C. 'docker run --rm -v /foo busybox'
4. D. 'docker run --remove -v /foo busybox'

Correct Answer: C

Which of the following is supported by control groups?

1. A. Manage certificates
2. B. Collect net
3. C. Limit CPU usage within a container
4. D. Isolate processes in a container

Correct Answer: C

A host machine has four CPUs available and two running containers. The sysadmin would like to assign two CPUs to each container.
Which of the following commands achieves this?

1. A. Set the '--cpuset-cpu's flag to '1.3' on one container and '2.4' on the other container.
2. B. Set the '--cpuset-cpus' flag to '.5' on both containers
3. C. Set the '--cpuset-cpus' flag of the 'dockerd' process to the value 'even-spread'
4. D. Set the '--cpu-quota' flag to '1.3' on one container and '2,4' on the other container.

Correct Answer: B

An application image runs in multiple environments, and each environment uses different certificates and ports, what is the best practice to deploy the containers?

1. A. Create a Dockerfile for each environment, specifying ports and ENV variables for certificates.
2. B. Create a Dockerfile for each environment, specifying ports and Docker secrets for certificates.
3. C. Create images that contain the specific configuration for every environment.
4. D. Create a config file for each environment.

Correct Answer: D

Following the principle of least privilege, which of the following methods can be used to securely grnt access to the specific user to communicate to a Docker engine? (Choose two.)

1. A. Utilize the '--host 0.0.0.0:2375' option to the Docker daemon to listen on port 2375 over TCP on all interfaces
2. B. Utilize openssl to create TLS client and server certificates, configuring the Docker engine to use with mutual TLS over TCP.
3. C. Utilize the '--host 127.0.0.1:2375' option to the Docker daemon to listen on port 2375 over TCP on localhost
4. D. Give the user root access to the server to allow them to run Docker commands as root.
5. E. Add the user to the 'docker' group on the server or specify the grouè with the '--group' Docker daemon option.

Correct Answer: BE