Which of the following constitutes a production-ready devicemapper configuration for the Docker engine?

A.

Create a volume group in devicemapper and utilize the '--dm.thinpooldev' Docker daemon
option, specifying the volume group

B.

Format a partition with xfs and mount it at '/var/lib/docker'

C.

Utilize the '--storage-opt dm.directlvm_device' Docker daemon option, specifying a block
device

D.

Nothing, devicemapper comes ready for production usage out of the box

What is the docker command to find the current logging driver for a running container?

A.

docker stats

B.

docker info

C.

docker config

D.

docker inspect

Which one of the following commands will result in the volume being removed automatically once the
container has exited?

A.

'docker run --del -v /foo busybox'

B.

'docker run --read-only -v /foo busybox'

C.

'docker run --rm -v /foo busybox'

D.

'docker run --remove -v /foo busybox'

What is used by the kernel to Isolate resources when running Docker containers?

A.

Namespaces

B.

Overlay networks

C.

Volumes

D.

Control groups (also know as cgroups)

Which flag for a service would allow a container to consume more than 2 GB of memory only when there is
no memory contention but would also prevent a container from consuming more than 4GB of memory, in any case?

A.

--limit-memory 2GB --reserve-memory 4GB

B.

--limit-memory 4GB --reserve-memory 2GB

C.

--memory-swap 2GB --limit-memory 4GB

D.

--memory-swap 4GB --limit-memory 2GB

Which of the following commands wifi automatically create a volume when a container is started?

A.

'docker container run --name nginxtest --volumes=/app nginx'

B.

'docker container run --name nginxtest -v /app:mount nginx'

C.

'docker container run --name nginxtest --volumes myvol:/app:new nginx

D.

docker container run --name nginxtest -v myvol:/app nginx'

What is the recommended way to configure the daemon flags and environment variables for your Docker
daemon in a platform independent way?

A.

Set the configuration options using the ENV variable

B.

Set the configuration options in '/etc/docker/daemon.json'

C.

Set the configuration DOCKER_OPTS in '/etc/default/docker'

D.

Using 'docker config' to set the configuration options.

Which of the following are types of namespaces used by Docker to provide isolation? (Choose 2.)

A.

Host

B.

Network

C.

Process ID

D.

Authentication

E.

Storage

A container named "analytics" that stores results in a volume called "data" was created.
docker run -d -name=analytics -v data:/data app1
How are the results accessed in "data" with another container called "app2"?

A.

docker run -d --name=reports --volume=data app2

B.

docker run -d --name=reports --volumes-from=analytics app2

C.

docker run -d --name=reports --volume=app1 app2

D.

docker run -d --name=reports --mount=app1 app2

Following the principle of least privilege, which of the following methods can be used to securely grnt access to the specific user to communicate to a Docker engine? (Choose two.)

A.

Utilize the '--host 0.0.0.0:2375' option to the Docker daemon to listen on port 2375 over
TCP on all interfaces

B.

Utilize openssl to create TLS client and server certificates, configuring the Docker engine to
use with mutual TLS over TCP.

C.

Utilize the '--host 127.0.0.1:2375' option to the Docker daemon to listen on port 2375 over
TCP on localhost

D.

Give the user root access to the server to allow them to run Docker commands as root.

E.

Add the user to the 'docker' group on the server or specify the grouè with the '--group' Docker daemon
option.

What behavior is expected when a service is created with the following command:
'docker service create -publish 8000:80 nginx'

A.

All nodes in the cluster will listen on port 8080 and forward to port 80 in the container.

B.

Only a single node in the cluster will listen on port 8080 and forward to port 80 in the
container.

C.

All nodes in the cluster will listen on port 80 and forward to port 8080 in the container.

D.

Only a single node in the cluster will listen on port 80 and forward to port 8080 in the container.

In Docker Trusted Registry, how would a user prevent an image, for example 'nginx:latest' from being
overwritten by another user with push access to the repository?

A.

Tag the image with 'nginx:immutable'

B.

Remove push access from all other users.

C.

Use the DTR web UI to make the tag immutable.

D.

Keep a backup copy of the image on another repository