DCA Free Practice Test

How do you configure Docker engine to use a registry that is not configured with TLS certificates from a trusted CA?

1. A. Set IGNORE_TLS in the 'daemon.json' configuration file.
2. B. Set and export the IGNORE_TLS environment variable on the command line
3. C. Set INSECURE_REGISTRY in the '/etc/docker/default' configuration file
4. D. Pass the '--insecure.-registry' flag to the daemon at run time

Correct Answer: D

A service 'wordpress' is running using a password string to connect to a non-Dockerized database service. The password string is passed into the 'wordpress' service as a Docker secret. Per security policy, the password on the database was changed. Identity the correct sequence of steps to rotate the secret from the old password to the new password.

1. A. Create a new docker secret with the new passwor
2. B. Trigger a rolling secret update by using the 'docker secret update' command
3. C. Trigger an update to the service by using 'docker service update --secret='
4. D. Create a new docker secret with the new passwor
5. E. Remove the existing service using 'docker service rm'. Start a new service with the new secret using "--secret="
6. F. Create a new docker secret with a new passwor
7. G. Trigger a rolling update of the "wordpress" service, by using "--secret-rm" & "--secret-add" to remove the old secret and add the updated secret.

Correct Answer: D

Which of the following namespaces is disabled by default and must be enabled at Docker engine runtime in order to be used?

1. A. user
2. B. pid
3. C. net
4. D. mnt

Correct Answer: A

Which flag for a service would allow a container to consume more than 2 GB of memory only when there is no memory contention but would also prevent a container from consuming more than 4GB of memory, in any case?

1. A. --limit-memory 2GB --reserve-memory 4GB
2. B. --limit-memory 4GB --reserve-memory 2GB
3. C. --memory-swap 2GB --limit-memory 4GB
4. D. --memory-swap 4GB --limit-memory 2GB

Correct Answer: C

Which of the following modes can be used for service discovery of a Docker swarm service (Pick 2 correct answers)

1. A. Virtual IP (VIP) with --endpoint-mode vip
2. B. Overlay with --endpoint-mode overlay
3. C. DNS Round-Robin with --endpoint-mode dnsrr
4. D. Ingress with --endpoint-mode ingress
5. E. Network Address Translation(NAT) with --endpoint-mode nat

Correct Answer: AC