Free Cram & Latest Exams Dumps

QUESTION 33
Is this a Linux kernel namespace that is disabled by default and must be enabled at Docker engine runtime to be used?
Solution: net

QUESTION 34
Is this a way to configure the Docker engine to use a registry without a trusted TLS certificate?
Solution: Pass the ‘–insecure-registry’ flag to the daemon at run time.

QUESTION 35
In Docker Trusted Registry, is this how a user can prevent an image, such as ‘nginx:latest’, from being overwritten by another user with push access to the repository?
Solution: Use the DTR web Ul to make all tags in the repository immutable.

QUESTION 36
A host machine has four CPUs available and two running containers. The sysadmin would like to assign two CPUs to each container.
Which of the following commands achieves this?

QUESTION 37
You created a new service named ‘http’ and discover it is not registering as healthy. Will this command enable you to view the list of historical tasks for this service?
Solution: ‘docker inspect http’

QUESTION 38
You want to provide a configuration file to a container at runtime. Does this set of Kubernetes tools and steps accomplish this?
Solution: Turn the configuration file into a configMap object, use it to populate a volume associated with the pod, and mount that file from the volume to the appropriate container and path.

QUESTION 39
A company’s security policy specifies that development and production containers must run on separate nodes in a given Swarm cluster.
Can this be used to schedule containers to meet the security policy requirements?
Solution: resource reservation

QUESTION 40
Which of the following statements is true about secrets?

QUESTION 41
During development of an application meant to be orchestrated by Kubernetes, you want to mount the /data directory on your laptop into a container.
Will this strategy successfully accomplish this?
Solution: Add a volume to the pod that sets hostPath.path: /data, and then mount this volume into the pod’s containers as desired.

QUESTION 42
Will this command ensure that overlay traffic between service tasks is encrypted?
Solution: docker network create -d overlay -o encrypted=true <network-name>

QUESTION 43
Will this command display a list of volumes for a specific container?
Solution: docker container logs nginx –volumes’

QUESTION 44
In Docker Trusted Registry, how would a user prevent an image, for example ‘nginx:latest’ from being overwritten by another user with push access to the repository?

QUESTION 45
One of several containers in a pod is marked as unhealthy after failing its livenessProbe many times. Is this the action taken by the orchestrator to fix the unhealthy container?
Solution: The unhealthy container is restarted.

QUESTION 46
Will this command list all nodes in a swarm cluster from the command line?
Solution: ‘docker swarm nodes’

QUESTION 47
Which of the following is required to install Docker EE from a package repository?

QUESTION 48
Does this command create a swarm service that only listens on port 53 using the UDP protocol?
Solution: ‘docker service create -name dns-cache -p 53:53 -service udp dns-cache’

QUESTION 49
What service mode is used to deploy a single task of a service to each node?

QUESTION 50
After creating a new service named ‘http’, you notice that the new service is not registering as healthy. How do you view the list of historical tasks for that service by using the command line?

QUESTION 51
Does this command create a swarm service that only listens on port 53 using the UDP protocol?
Solution: ‘docker service create –name dns-cache -p 53:53/udp dns-cache’

QUESTION 52
If installing Docker using devicemapper for storage with the Intent to run production workloads, how should devicemapper be configured

QUESTION 53
Which one of the following commands will result in the volume being removed automatically once the container has exited?

QUESTION 54
A container named “analytics” that stores results in a volume called “data” was created.
docker run -d –name=analytics -v data:/data app1
How are the results accessed in “data” with another container called “app2”?