[Q10-Q29] Easily To Pass New DCA Premium Exam Updated [Aug 25, 2022]

Q10. The following Docker Compose file is deployed as a stack:

Is this statement correct about this health check definition?
Solution: Health checks test for app health ten seconds apart. If the test fails, the container will be restarted three times before it gets rescheduled.

Q11. Is this a function of UCP?
Solution: image role-based access control

Q12. A service ‘wordpress’ is running using a password string to connect to a non-Dockerized database service. The password string is passed into the ‘wordpress’ service as a Docker secret. Per security policy, the password on the database was changed. Identity the correct sequence of steps to rotate the secret from the old password to the new password.

Q13. A users attempts to set the system time from inside a Docker container are unsuccessful. Could this be blocking this operation?
Solution: inter-process communication

Q14. You are pulling images from a Docker Trusted Registry installation configured to use self-signed certificates, and this error appears:
‘x509: certificate signed by unknown authority’.
You already downloaded the Docker Trusted Registry certificate authority certificate from https://dtr.example.com/ca.
How do you trust it? (Select two.)

Q15. The output of which command can be used to find the architecture and operating system an image is compatible with?

Q16. Which one of the following commands will show a list of volumes for a specific container?

Q17. Will this command ensure that overlay traffic between service tasks is encrypted?
Solution: docker service create –network –secure

Q18. What is the recommended way to configure the daemon flags and environment variables for your Docker daemon in a platform independent way?

Q19. A company’s security policy specifies that development and production containers must run on separate nodes in a given Swarm cluster.
Can this be used to schedule containers to meet the security policy requirements?
Solution: resource reservation

Q20. In the context of a swarm mode cluster, does this describe a node?
Solution: an instance of the Docker engine participating in the swarm

Q21. Seven managers are in a swarm cluster.
Is this how should they be distributed across three datacenters or availability zones?
Solution: 3-3-1

Q22. In Docker Trusted Registry, is this how a user can prevent an image, such as ‘nginx:latest’, from being overwritten by another user with push access to the repository?
Solution: Use the DTR web Ul to make all tags in the repository immutable.

Q23. Will this configuration achieve fault tolerance for managers in a swarm?
Solution: an odd number of manager nodes, totaling more than two

Q24. Will this command list all nodes in a swarm cluster from the command line?
Solution: ‘docker swarm nodes’

Q25. Will a DTR security scan detect this?
Solution: licenses for known third party binary components

Q26. You created a new service named ‘http’ and discover it is not registering as healthy. Will this command enable you to view the list of historical tasks for this service?
Solution: ‘docker service ps http’

Q27. You set up an automatic pruning policy on a DTR repository to prune all images using Apache licenses. What effect does this have on images in this repository?

Q28. Will this Linux kernel facility limit a Docker container’s access to host resources, such as CPU or memory?
Solution: seccomp

Q29. You have created a Docker bridge network on a host with three containers attached, how do you make this containers accessible outside of the host?