Free Docker DCA Exam Dumps and DCA Exam Questions

Question No: 1

MultipleChoice

Will this sequence of steps completely delete an image from disk in the Docker Trusted Registry?

Solution. Delete the image and delete the image repository from Docker Trusted Registry.

Options

AYes

BNo

Question No: 2

MultipleChoice

An application image runs in multiple environments, with each environment using different certificates and ports. Is this a way to provision configuration to containers at runtime?

Solution: Create a Dockerfile for each environment, specifying ports and ENV variables for certificates.

Options

AYes

BNo

Question No: 3

MultipleChoice

When using the Docker client to push an image to a registry, what environment variable is used to instruct the client to perform signing of the image?

Options

ADOCKER_CONTENT_TRUST=1

BDOCKER_IMAGE_SIGN=1

CDOCKER_PUSH_SIGN=1

DNOTARY_ENABLE=1
Correct

Question No: 4

MultipleChoice

Which of the following is supported by control groups?

Options

AManage certificates

BCollect net

CLimit CPU usage within a container

DIsolate processes in a container

Question No: 5

MultipleChoice

What is the purpose of a client bundle in the Universal Control Plane?

Options

AAuthenticate a user using client certificates to the Universal Control Plane

BProvide a new user instructions for how to login to the Universal Control Plane

CProvide a user with a Docker client binary compatible with the Universal Control Plane

DGroup multiple users in a team in the Universal Control Plane

Question No: 6

MultipleChoice

Wha is the purpose of Docker Content Trust?

Options

ASigning and verification of image tags

BEnabling mutual TLS between the Docker client and server

CDocker registry TLS verification and encryption

DIndicating an image on Docker Hub is an official image

Question No: 7

MultipleChoice

Following the principle of least privilege, which of the following methods can be used to securely grnt access to the specific user to communicate to a Docker engine? (Choose two.)

Options

AUtilize the '--host 0.0.0.0:2375' option to the Docker daemon to listen on port 2375 over
TCP on all interfaces

BUtilize openssl to create TLS client and server certificates, configuring the Docker engine to
use with mutual TLS over TCP.

CUtilize the '--host 127.0.0.1:2375' option to the Docker daemon to listen on port 2375 over
TCP on localhost

DGive the user root access to the server to allow them to run Docker commands as root.

EAdd the user to the 'docker' group on the server or specify the grou with the '--group' Docker daemon option.

Question No: 8

MultipleChoice

Which of the following are types of namespaces used by Docker to provide isolation? (Choose 2.)

Options

AHost

BNetwork

CProcess ID

DAuthentication

EStorage

Question No: 9

MultipleChoice

Which of the following namespaces is disabled by default and must be enabled at Docker engine runtime in order to be used?

Options

Auser

Bpid

Cnet

Dmnt

Question No: 10

MultipleChoice

Which of the following statements is true about secrets?

Options

ASecrets can be created from any node in the cluster.

BSecrets can be modified after they are created.

CSecret are stored unencrypted on manager nodes.

DSecrets can be created using standard input (STDIN) and a file.