Download DCA Exam Dumps Questions to get 100% Success in Docker
100% Accurate Answers! DCA Actual Real Exam Questions
Docker Certified Associate (DCA) Certification Exam is a professional certification for Docker developers and system administrators. Docker Certified Associate (DCA) Exam certification exam validates the candidate's expertise in managing, deploying, and troubleshooting Docker-based applications. The DCA certification is designed to test the candidate's knowledge of Docker architecture, Docker CLI, Docker Compose, Docker Swarm, and Docker networking.
NEW QUESTION # 53
Will this configuration achieve fault tolerance for managers in a swarm?
Solution: only two managers, one active and one passive.
- A. Yes
- B. No
Answer: B
NEW QUESTION # 54
What service mode is used to deploy a single task of a service to each node?
- A. universal
- B. distributed
- C. replicated
- D. spread
- E. global
Answer: E
NEW QUESTION # 55
You created a new service named 'http* and discover it is not registering as healthy. Will this command enable you to view the list of historical tasks for this service?
Solution. 'docker inspect http"
- A. Yes
- B. No
Answer: B
Explanation:
Explanation
Using docker inspect http does not enable you to view the list of historical tasks for this service. The docker inspect command shows low-level information about one or more objects, such as containers, images, networks, etc. It does not show information about services or tasks. To view the list of historical tasks for this service, you need to use docker service ps http --no-trunc. References:
https://docs.docker.com/engine/reference/commandline/inspect/,
https://docs.docker.com/engine/reference/commandline/service_ps/
NEW QUESTION # 56
A company's security policy specifies that development and production containers must run on separate nodes in a given Swarm cluster.
Can this be used to schedule containers to meet the security policy requirements?
Solution: node taints
- A. Yes
- B. No
Answer: B
Explanation:
Explanation
Node taints cannot be used to schedule containers to meet the security policy requirements, because node taints are a Kubernetes concept and not a Swarm concept. According to the official documentation, node taints are used to mark nodes with certain attributes that prevent pods from being scheduled on them unless they have matching tolerations.
References: https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/
NEW QUESTION # 57
Is this a Linux kernel namespace that is disabled by default and must be enabled at Docker engine runtime to be used?
Solution: net
- A. Yes
- B. No
Answer: B
NEW QUESTION # 58
You configure a local Docker engine to enforce content trust by setting the environment variable DOCKER_CONTENT_TRUST=1.
If myorg/myimage: 1.0 is unsigned, does Docker block this command?
Solution: docker image import <tarball> myorg/myimage:1.0
- A. Yes
- B. No
Answer: B
Explanation:
Explanation
Docker does not block this command, because docker image import does not verify content trust by default.
According to the official documentation, docker image import creates an image from an existing tarball file and does not interact with any registry or sign any content.
NEW QUESTION # 59
Which of the following constitutes a production-ready devicemapper configuration for the Docker engine?
- A. Create a volume group in devicemapper and utilize the '--dm.thinpooldev' Docker daemon option, specifying the volume group
- B. Nothing, devicemapper comes ready for production usage out of the box
- C. Utilize the '--storage-opt dm.directlvm_device' Docker daemon option, specifying a block device
- D. Format a partition with xfs and mount it at '/var/lib/docker'
Answer: C
Explanation:
Explanation
NEW QUESTION # 60
An application image runs in multiple environments, with each environment using different certificates and ports.
Is this a way to provision configuration to containers at runtime?
Solution: Provision a Docker config object for each environment.
- A. No
- B. Yes
Answer: B
NEW QUESTION # 61
What is the difference between a resource limit and a resource reservation when scheduling services?
- A. A resource limit is hard limit for your service, while a reservation is used to find a host with adequate
resources for scheduling. Correct - B. A resource limit is used to find a host with adequate resources for scheduling a hard limit for your service, while a reservation is hard limit for your service.
- C. A resource limit is a soft limit for your service, while a reservation is hard limit and the docker engine will do its best to keep your service at the limit.
- D. A resource limit and a resource reservation can be used interchangeably.
Answer: D
NEW QUESTION # 62
Is this statement correct?
Solution. A Dockerfile stores persistent data between deployments of a container
- A. Yes
- B. No
Answer: B
Explanation:
Explanation
A Dockerfile does not store persistent data between deployments of a container. A Dockerfile is a text document that contains instructions for building an image from a base image and other components. A Dockerfile does not store any data itself; it only defines how an image should be built. Persistent data between deployments of a container can be stored using volumes or bind mounts, which are ways of attaching external storage to containers. References: https://docs.docker.com/engine/reference/builder/,
https://docs.docker.com/storage/
NEW QUESTION # 63
The following health check exists in a Dockerfile:
'HEALTCHECK CMD curl --fail http://localhost/health || exit 1'
Which of the following describes its purpose?
- A. Defines the health check endpoint on the local host interface for containers to monitor the health of the docker engine.
- B. Defines the action taken when container health fails, which in this case will kill the container with exit status 1
- C. Defines the health check endpoint on the localhost interface for external monitoring tools to monitor the health of the docker engine.
- D. Defines the health check for the containerized application so that the application health can be monitored by the Docker engine
Answer: B
NEW QUESTION # 64
Which of the following is supported by control groups?
- A. Limit CPU usage within a container
- B. Collect net
- C. Manage certificates
- D. Isolate processes in a container
Answer: A
NEW QUESTION # 65
How do you configure Docker engine to use a registry that is not configured with TLS certificates from a trusted CA?
- A. Set INSECURE_REGISTRY in the '/etc/docker/default' configuration file
- B. Pass the '--insecure.-registry' flag to the daemon at run time
- C. Set IGNORE_TLS in the 'daemon.json' configuration file.
- D. Set and export the IGNORE_TLS environment variable on the command line
Answer: B
NEW QUESTION # 66
Will this command display a list of volumes for a specific container?
Solution: docker volume logs nginx --containers'
- A. Yes
- B. No
Answer: B
NEW QUESTION # 67
Will this command ensure that overlay traffic between service tasks is encrypted?
Solution: docker service create --network --encrypted
- A. Yes
- B. No
Answer: B
Explanation:
Explanation
This command will not ensure that overlay traffic between service tasks is encrypted, because it uses an invalid option for enabling encryption and an incomplete option for specifying the network. According to the official documentation, there is no such option as --encrypted for the docker service create command. The correct option to use is --network <network-name> where <network-name> is an existing overlay network that was created with encryption enabled.
References: https://docs.docker.com/network/drivers/overlay/#encryption
https://docs.docker.com/engine/reference/commandline/service_create/
NEW QUESTION # 68
Which of the following is required to install Docker EE from a package repository?
- A. Repository URL obtained from Docker Store
- B. License key obtained from Docker Store
- C. Repository URL obtained from Docker Hub
- D. License key obtained from Docker Hub
Answer: A
NEW QUESTION # 69
Will this command display a list of volumes for a specific container?
Solution: 'docker container inspect nginx'
- A. No
- B. Yes
Answer: B
NEW QUESTION # 70
When an application being managed by UCP fails, you would like a summary of all requests made to the UCP API in the hours leading up to the failure.
What must be configured correctly beforehand for this to be possible?
- A. UCP logging levels must be set to the info' or debug' level.
- B. All engines in the cluster must have their log driver set to the metadata' or request' level.
- C. UCP audit logs must be set to the metadata' or request' level.
- D. Set the logging level in theconfig object for the ucp-kube-api-server container to warning or higher.
Answer: C
NEW QUESTION # 71
......
Best Value Available! Realistic Verified Free DCA Exam Questions: https://www.realvalidexam.com/DCA-real-exam-dumps.html
Pass Your Exam Easily! DCA Real Question Answers Updated: https://drive.google.com/open?id=1dncAW4BRz79Q35LRwkFSVggi2tp--b-j
