NEW QUESTION 1
What is the docker command to find the current logging driver for a running container?

• A. docker stats
• B. docker info
• C. docker config
• D. docker inspect

Answer: D

NEW QUESTION 2
An application image runs in multiple environments, and each environment uses different certificates and ports, what is the best practice to deploy the containers?

• A. Create a Dockerfile for each environment, specifying ports and ENV variables for certificates.
• B. Create a Dockerfile for each environment, specifying ports and Docker secrets for certificates.
• C. Create images that contain the specific configuration for every environment.
• D. Create a config file for each environment.

Answer: D

NEW QUESTION 3
Which of the following commands will ensure that overlay traffic between service tasks is encrypted?

• A. docker service create --network <network-name> --secure <service-name>
• B. docker network create -d overlay --secure <network-name>
• C. docker network create -d overlay -o encrypted=true <network-name>
• D. docker service create --network <network-name> --encrypted <service-name>

Answer: C

NEW QUESTION 4
A user is having problems running Docker. Which of the following will start Docker in debug mode?

• A. Set the debug key to true in the 'daemon.json' file.
• B. Start the 'dockerd' process manually with the '--logging' flag set to debug
• C. Set the logging key to debug in the 'daemon.json' file.
• D. Start the 'dockerd' process manually with the '--raw-logs' flag set to debug

Answer: A

NEW QUESTION 5
Which of the following is true about using the '-P' option when creating a new container?

• A. Docker binds each exposed container port to a random port on all the host's interface
• B. Docker gives extended privileges to the container.
• C. Docker binds each exposed container port to a random port on a specified host interface
• D. Docker binds each exposed container port with the same port on the host

Answer: AExplanationControllare

NEW QUESTION 6
What is one way of directly transferring a Docker Image from one Docker host in another?

• A. 'docker push' the image to the IP address of the target host.
• B. 'docker commit' to save the image outside of the Docker filesyste
• C. Then transfer the file over to the target host and 'docker start' to start the container again.
• D. There is no way of directly transferring Docker images between host
• E. A Docker Registry must be used ad an intermediary.
• F. 'docker save' the image to save it as TAR file and copy it over to the target hos
• G. Then use 'docker load' to un-TAR the image back as a Docker image.

Answer: D

NEW QUESTION 7
What is used by the kernel to Isolate resources when running Docker containers?

• A. Namespaces
• B. Overlay networks
• C. Volumes
• D. Control groups (also know as cgroups)

Answer: D

NEW QUESTION 8
How do you configure Docker engine to use a registry that is not configured with TLS certificates from a trusted CA?

• A. Set IGNORE_TLS in the 'daemon.json' configuration file.
• B. Set and export the IGNORE_TLS environment variable on the command line
• C. Set INSECURE_REGISTRY in the '/etc/docker/default' configuration file
• D. Pass the '--insecure.-registry' flag to the daemon at run time

Answer: D

NEW QUESTION 9
Which command interactively monitors all container activity in the Docker engine?

• A. docker system logs
• B. docker system events
• C. docker container events
• D. docker container logs

Answer: B

NEW QUESTION 10
You have deployed a service to swarm. Which command uses the Docker CLI to set the number of tasks of the services to 5? (choose 2)

• A. 'docker service update --replicas=5 <service-id>'
• B. 'docker replica update <service-id>=5'
• C. 'docker update service <service-id>=5'
• D. 'docker service replicas <service-id>=5'
• E. 'docker service scale <service-id> = 5''

Answer: AE

NEW QUESTION 11
What behavior is expected when a service is created with the following command: 'docker service create --publish 8000:80 nginx'

• A. All nodes in the cluster will listen on port 8080 and forward to port 80 in the container.
• B. Only a single node in the cluster will listen on port 8080 and forward to port 80 in the container.
• C. All nodes in the cluster will listen on port 80 and forward to port 8080 in the container.
• D. Only a single node in the cluster will listen on port 80 and forward to port 8080 in the container.

Answer: A

NEW QUESTION 12
What is the docker command to setup a swarm?

• A. docker swarm init
• B. docker swarm create
• C. docker init swarm
• D. docker create swarm

Answer: A

Explanation:
Explanation https://docs.docker.com/engine/reference/commandline/swarm/

NEW QUESTION 13
If installing Docker using devicemapper for storage with the Intent to run production workloads, how should devicemapper be configured

• A. direct-lvm
• B. loop-lvm
• C. overlay-lvm
• D. aufs-lvm

Answer: A

NEW QUESTION 14
A service 'wordpress' is running using a password string to connect to a non-Dockerized database service. The password string is passed into the 'wordpress' service as a Docker secret. Per security policy, the password on the database was changed. Identity the correct sequence of steps to rotate the secret from the old password to the new password.

• A. Create a new docker secret with the new passwor
• B. Trigger a rolling secret update by using the 'docker secret update' command
• C. Trigger an update to the service by using 'docker service update --secret=<new password>'
• D. Create a new docker secret with the new passwor
• E. Remove the existing service using 'docker service rm'. Start a new service with the new secret using "--secret=<new password>"
• F. Create a new docker secret with a new passwor
• G. Trigger a rolling update of the "wordpress" service, by using "--secret-rm" & "--secret-add" to remove the old secret and add the updated secret.

Answer: D

NEW QUESTION 15
You have just executed 'docker swarm leave' on a node. What command can be run on the same node to confirm it has left the cluster?

• A. docker node ls
• B. docker system info
• C. docker system status
• D. docker system status

Answer: B

NEW QUESTION 16
A host machine has four CPUs available and two running containers. The sysadmin would like to assign two CPUs to each container.
Which of the following commands achieves this?

• A. Set the '--cpuset-cpu's flag to '1.3' on one container and '2.4' on the other container.
• B. Set the '--cpuset-cpus' flag to '.5' on both containers
• C. Set the '--cpuset-cpus' flag of the 'dockerd' process to the value 'even-spread'
• D. Set the '--cpu-quota' flag to '1.3' on one container and '2,4' on the other container.

Answer: B

NEW QUESTION 17
A server is running low on disk space. What command can be used to check the disk usage of images, containers, and volumes for Docker engine?

• A. 'docker system df'
• B. 'docker system prune'
• C. 'docker system free'
• D. 'docker system ps'

Answer: A

NEW QUESTION 18
What is the difference between the ADD and COPY dockerfile instructions? (choosen 2)

• A. ADD supports compression format handling while COPY does not.
• B. COPY supports regular expression handling while ADD does not.
• C. COPY supports compression format handling while ADD does not.
• D. ADD support remote URL handling while COPY does not.
• E. ADD supports regular expression handling while COPY does not.

Answer: DE

NEW QUESTION 19
What is the recommended way to configure the daemon flags and environment variables for your Docker daemon in a platform independent way?

• A. Set the configuration options using the ENV variable
• B. Set the configuration options in '/etc/docker/daemon.json'
• C. Set the configuration DOCKER_OPTS in '/etc/default/docker'
• D. Using 'docker config' to set the configuration options.

Answer: B

NEW QUESTION 20
Which set of commands can identify the publishd port(s) for a container? (Choose 1.)

• A. 'docker port inspect', 'docker container inspect'
• B. 'docker container inspect', docker port'
• C. 'docker info','docker network inspect'
• D. 'docker network inspect','docker port'

Answer: B

NEW QUESTION 21
......