Which of the following commands is used to display system-wide Docker configuration on a host?

A.

docker info

B.

docker status

C.

docker inspect

D.

docker system

You have just executed 'docker swarm leave' on a node. What command can be run on the same node to
confirm it has left the cluster?

A.

docker node ls

B.

docker system info

C.

docker system status

D.

docker system status

Which of these swarm manager configurations will cause the cluster to be in a lost quorum state?

A.

4 managers of which 2 are healthy

B.

1 manager of which 1 is healthy

C.

3 managers of which 2 are healthy

D.

5 managers of which 3 are healthy

Which statement is true?

A.

CMD shell format uses this form ["param", param", "param"]

B.

ENTRYPOINT cannot be used in conjuction with CMD

C.

CMD is used to run the software is the image along with any arguments

D.

ENTRYPOINT cannot be overriden in the "docker container run" command

Wha is the purpose of Docker Content Trust?

A.

Signing and verification of image tags

B.

Enabling mutual TLS between the Docker client and server

C.

Docker registry TLS verification and encryption

D.

Indicating an image on Docker Hub is an official image

The following health check exists in a Dockerfile:
'HEALTCHECK
CMD curl -fail http://localhost/health || exit 1'
Which of the following describes its purpose?

A.

Defines the action taken when container health fails, which in this case will kill the container with exit
status 1 B. Defines the health check endpoint on the localhost interface for external monitoring tools to
monitor the health of the docker engine.

B.

Defines the health check endpoint on the local host interface for containers to monitor the health of the
docker engine.

C.

Defines the health check for the containerized application so that the application health can be
monitored by the Docker engine

What is the purpose of a client bundle in the Universal Control Plane?

A.

Authenticate a user using client certificates to the Universal Control Plane

B.

Provide a new user instructions for how to login to the Universal Control Plane

C.

Provide a user with a Docker client binary compatible with the Universal Control Plane

D.

Group multiple users in a team in the Universal Control Plane

Which of the following is true about using the '-P' option when creating a new container?

A.

Docker binds each exposed container port to a random port on all the host's interface

B.

Docker gives extended privileges to the container.

C.

Docker binds each exposed container port to a random port on a specified host interface

D.

Docker binds each exposed container port with the same port on the host

A service 'wordpress' is running using a password string to connect to a non-Dockerized database service. The password string is passed into the 'wordpress' service as a Docker secret. Per security policy, the password on the database was changed. Identity the correct sequence of steps to rotate the secret from the old password to the new password.

A.

Create a new docker secret with the new password. Trigger a rolling secret update by using the 'docker
secret update' command

B.

Trigger an update to the service by using 'docker service update --secret=<new password>'

C.

Create a new docker secret with the new password. Remove the existing service using 'docker service
rm'. Start a new service with the new secret using "--secret=<new password>"

D.

Create a new docker secret with a new password. Trigger a rolling update of the "wordpress" service, by
using "--secret-rm" & "--secret-add" to remove the old secret and add the updated secret.

An application image runs in multiple environments, and each environment uses different certificates and
ports, what is the best practice to deploy the containers?

A.

Create a Dockerfile for each environment, specifying ports and ENV variables for certificates.

B.

Create a Dockerfile for each environment, specifying ports and Docker secrets for certificates.

C.

Create images that contain the specific configuration for every environment.

D.

Create a config file for each environment.

A docker service 'web' is running with a scale factor of 1 (replicas = 1).
Bob intends to use the command 'docker service update -replicas=3 web'.
Alice intends to use the command 'docker service scale web=3'.
How do the outcomes oft these two commands differ?

A.

Bob's command results in an error. Alice's command updates the number of replicas of the 'web' service
to 3.

B.

Bob's command only updates the service definition, but no new replicas are started. Alice's command
results in the actual scaling up of the 'web' service.

C.

Bob's command updates the number of replicas of the 'web' service to 3. Alice's command results in an error.

D.

Both Bob's and Alice's commands result in exactly the same outcome, which is 3 instances of the 'web'
service.

What is one way of directly transferring a Docker Image from one Docker host in another?

A.

'docker push' the image to the IP address of the target host.

B.

'docker commit' to save the image outside of the Docker filesystem. Then transfer the file over to the
target host and 'docker start' to start the container again.

C.

There is no way of directly transferring Docker images between hosts. A Docker Registry must be used
ad an intermediary.

D.

'docker save' the image to save it as TAR file and copy it over to the target host. Then use 'docker load'
to un-TAR the image back as a Docker image.