Does this describe the role of Control Groups (cgroups) when used with a Docker container? accounting and limiting of resources
#31
Answer: A✅ Correct❌ Incorrect
Two development teams in your organization use Kubernetes and want to deploy their applications while ensuring that Kubernetes-specific resources, such as secrets, are grouped together for each application.Is this a way to accomplish this?Create one pod and add all the resources needed for each application.
#32
Answer: B✅ Correct❌ Incorrect
You created a new service named ‘http’ and discover it is not registering as healthy.Will this command enable you to view the list of historical tasks for this service?‘docker inspect http’
#33
Answer: B✅ Correct❌ Incorrect
The Kubernetes yaml shown below describes a clusterIP service.Is this a correct statement about how this service routes requests?Traffic sent to the IP of any pod with the label app: nginx on port 8080 will be forwarded to port 80 in that pod.
#34
Answer: B✅ Correct❌ Incorrect
Will a DTR security scan detect this?private keys copied to the image
#35
Answer: A✅ Correct❌ Incorrect
Will a DTR security scan detect this?image configuration poor practices, such as exposed ports or inclusion of compilers in production images
#36
Answer: B✅ Correct❌ Incorrect
You configure a local Docker engine to enforce content trust by setting the environment variable DOCKER_CONTENT_TRUST=1.If myorg/myimage:1.0 is unsigned, does Docker block this command? docker image build, from a Dockerfile that begins FROM myorg/myimage:1.0
#37
Answer: A✅ Correct❌ Incorrect
Can this set of commands identify the published port(s) for a container?‘docker container inspect’, ‘docker port’
#38
Answer: A✅ Correct❌ Incorrect
Can this set of commands identify the published port(s) for a container?‘docker port inspect’, ‘docker container inspect’
#39
Answer: B✅ Correct❌ Incorrect
You want to create a container that is reachable from its host’s network.Does this action accomplish this?Use either EXPOSE or --publish to access the container on the bridge network.
#40
Answer: B✅ Correct❌ Incorrect
Will this action upgrade Docker Engine CE to Docker Engine EE?Run docker engine activate.
#41
Answer: B✅ Correct❌ Incorrect
In Docker Trusted Registry, is this how a user can prevent an image, such as ‘nginx:latest’, from being overwritten by another user with push access to the repository?Use the DTR web UI to make all tags in the repository immutable.
#42
Answer: B✅ Correct❌ Incorrect
Does this command display all the pods in the cluster that are labeled as ‘env: development’?‘kubectl get pods -l env=development’
#43
Answer: B✅ Correct❌ Incorrect
Does this command display all the pods in the cluster that are labeled as ‘env: development’?‘kubectl get pods --all-namespaces -l ‘env in (development)’ ’
#44
Answer: B✅ Correct❌ Incorrect
Is this a Linux kernel namespace that is disabled by default and must be enabled at Docker engine runtime to be used? user
#45
Answer: B✅ Correct❌ Incorrect
Will this command mount the host’s ‘/data’ directory to the ubuntu container in read-only mode?‘docker run --add-volume /data /mydata --read only ubuntu’
#46
Answer: B✅ Correct❌ Incorrect
Is this a type of Linux kernel namespace that provides container isolation?Process ID
#47
Answer: A✅ Correct❌ Incorrect
Will this Linux kernel facility limit a Docker container’s access to host resources, such as CPU or memory? seccomp
#48
Answer: B✅ Correct❌ Incorrect
Does this command create a swarm service that only listens on port 53 using the UDP protocol?‘docker service create --name dns-cache -p 53:53 --udp dns-cache’
#49
Answer: A✅ Correct❌ Incorrect
During development of an application meant to be orchestrated by Kubernetes, you want to mount the /data directory on your laptop into a container.Will this strategy successfully accomplish this?Add a volume to the pod that sets hostPath.path: /data, and then mount this volume into the pod’s containers as desired.
#50
Answer: B✅ Correct❌ Incorrect
You are running only Kubernetes workloads on a worker node that requires maintenance, such as installing patches or an OS upgrade.Which command must be run on the node to gracefully terminate all pods on the node, while marking the node as unschedulable?
#51
Answer: C✅ Correct❌ Incorrect
A Kubernetes node is allocated a /26 CIDR block (64 unique IPs) for its address space.If every pod on this node has exactly two containers in it, how many pods can this address space support on this node?
#52
Answer: A✅ Correct❌ Incorrect
You are troubleshooting a Kubernetes deployment called api, and want to see the events table for this object.Does this command display it?kubectl get deployment api
#53
Answer: B✅ Correct❌ Incorrect
Which networking drivers allow you to enable multi-host network connectivity between containers?
#54
Answer: C✅ Correct❌ Incorrect
You set up an automatic pruning policy on a DTR repository to prune all images using Apache licenses.What effect does this have on images in this repository?
#55
Answer: D✅ Correct❌ Incorrect
Seven managers are in a swarm cluster.Is this how should they be distributed across three datacenters or availability zones?4-2-1
#56
Answer: B✅ Correct❌ Incorrect
A company's security policy specifies that development and production containers must run on separate nodes in a given Swarm cluster.Can this be used to schedule containers to meet the security policy requirements?node affinities
#57
Answer: A✅ Correct❌ Incorrect
You created a new service named 'http' and discover it is not registering as healthy.Will this command enable you to view the list of historical tasks for this service?'docker service ps http'
#58
Answer: A✅ Correct❌ Incorrect
You configure a local Docker engine to enforce content trust by setting the environment variable DOCKER_CONTENT_TRUST=1.If myorg/myimage:1.0 is unsigned, does Docker block this command?docker image inspect myorg/mayimage:1.0