
[UPDATED 2022] Read DCA Study Guide Cover to Cover as Literally
100% Real & Accurate DCA Questions and Answers with Free and Fast Updates
Who should take the Docker Certified Associate Exam
The DCA Exam certification is an internationally-recognized certification that helps to have validation for those professionals who are knowledgeable in the Docker containerization technology. Candidates should have 6-12 months of experience and knowledge of using Docker services and docker images. It is good for these candidates:
- Fresher
- IT Administrator
- Developers
- Linux Administrator
NEW QUESTION 77
Which statement is true about DTR garbage collection?
- A. Garbage collection removes unused volumes from cluster nodes
- B. Garbage collection removes exited containers from cluster nodes.
- C. Garbage collection removes DTR images that are older than a configurable of days
- D. Garbage collection removes unreferenced image layers from DTR's backend storage.
Answer: D
NEW QUESTION 78
Which of the following is true about overlay networks?
- A. Overlay networks are first created on the manager nodes. Then they are created on the
worker nodes once a task is scheduled on the specific worker node. - B. Overlay networks are created only on the manager node that you created the overlay
networking on - C. Overlay networks are created on all cluster nodes when you create the overlay network.
- D. Overlay networks are only created on the manager nodes.
Answer: C
NEW QUESTION 79
Which one of the following commands will result in the volume being removed automatically once the container has exited?
- A. 'docker run --del -v /foo busybox'
- B. 'docker run --rm -v /foo busybox'
- C. 'docker run --remove -v /foo busybox'
- D. 'docker run --read-only -v /foo busybox'
Answer: B
NEW QUESTION 80
Can this set of commands identify the published port(s) for a container?
Solution: docker container inspect', 'docker port'
- A. Yes
- B. No
Answer: A
NEW QUESTION 81
You have just executed 'docker swarm leave' on a node. What command can be run on the same node to confirm it has left the cluster?
- A. docker node ls
- B. docker system status
- C. docker system info
- D. docker system status
Answer: C
NEW QUESTION 82
One of several containers in a pod is marked as unhealthy after failing its livenessProbe many times. Is this the action taken by the orchestrator to fix the unhealthy container?
Solution: Kubernetes automatically triggers a user-defined script to attempt to fix the unhealthy container.
- A. Yes
- B. No
Answer: B
NEW QUESTION 83
A service 'wordpress' is running using a password string to connect to a non-Dockerized database service. The password string is passed into the 'wordpress' service as a Docker secret. Per security policy, the password on the database was changed. Identity the correct sequence of steps to rotate the secret from the old password to the new password.
- A. Create a new docker secret with the new password. Trigger a rolling secret update by using the 'docker secret update' command
- B. Trigger an update to the service by using 'docker service update --secret=<new password>'
- C. Create a new docker secret with the new password. Remove the existing service using 'docker service rm'. Start a new service with the new secret using "--secret=<new password>"
- D. Create a new docker secret with a new password. Trigger a rolling update of the "wordpress" service, by using "--secret-rm" & "--secret-add" to remove the old secret and add the updated secret.
Answer: D
NEW QUESTION 84
Which 'docker run' flag lifts cgroup limitations?
- A. 'docker run --privileged'
- B. 'docker run --cap-drop'
- C. 'docker run --isolation'
- D. 'docker run --cpu-period'
Answer: A
NEW QUESTION 85
Does this command create a swarm service that only listens on port 53 using the UDP protocol?
Solution: 'docker service create -name dns-cache -p 53:53 -service udp dns-cache'
- A. Yes
- B. No
Answer: B
NEW QUESTION 86
Which of the following commands starts a Redis container and configures it to always restart unless it is
explicitly stopped or Docker is restarted?
- A. 'docker run -d --restart-policy unless-stopped redis'
- B. 'docker run -d --restart omit-stopped redis'
- C. 'docker run -d --restart unless-stopped redis'
- D. 'docker run -d --failure omit-stopped redis'
Answer: C
NEW QUESTION 87
Some Docker images take time to build through a Continuous Integration environment. You want to speed up builds and take advantage of build caching.
Where should the most frequently changed part of a Docker image be placed in a Dockerfile?
- A. in the ENTRYPOINT directive
- B. at the top of the Dockerfile
- C. at the bottom of the Dockerfile
- D. after the FROM directive
Answer: C
NEW QUESTION 88
You are pulling images from a Docker Trusted Registry installation configured to use self-signed certificates, and this error appears:
'x509: certificate signed by unknown authority'.
You already downloaded the Docker Trusted Registry certificate authority certificate from https://dtr.example.com/ca.
How do you trust it? (Select two.)
- A. Place the certificate in your OS certificate path, trust the certificate system-wide, and restart the Docker daemon across all cluster nodes.
- B. Place the certificate in '/etc/docker/dtr/dtr.example.com.crt' and restart the Docker daemon on all cluster nodes.
- C. Place the certificate in '/etc/docker/certs.d/dtr.example com/ca.crt' on all cluster nodes.
- D. Pass --insecure-registry to the Docker client.
- E. Pass '-trust-certificate ca.crt' to the Docker client.
Answer: C,D
NEW QUESTION 89
Is this a Linux kernel namespace that is disabled by default and must be enabled at Docker engine runtime to be used?
Solution: mnt
- A. Yes
- B. No
Answer: B
NEW QUESTION 90
Is this the purpose of Docker Content Trust?
Solution: Enable mutual TLS between the Docker client and server.
- A. Yes
- B. No
Answer: B
NEW QUESTION 91
Will this command display a list of volumes for a specific container?
Solution: 'docker container inspect nginx'
- A. Yes
- B. No
Answer: A
NEW QUESTION 92
Which one of the following commands will result in the volume being removed automatically once the container
has exited?
- A. 'docker run --del -v /foo busybox'
- B. 'docker run --rm -v /foo busybox'
- C. 'docker run --remove -v /foo busybox'
- D. 'docker run --read-only -v /foo busybox'
Answer: B
NEW QUESTION 93
......
Reliable Study Materials for DCA Exam Success For Sure: https://www.examcollectionpass.com/Docker/DCA-practice-exam-dumps.html
Get Unlimited Access to DCA Certification Exam Cert Guide: https://drive.google.com/open?id=1LOeZbRO9CRi0g2Db0NEdWBoX1Un6zKno