[Aug-2021] Docker DCA Dumps – Reduce Your Chance of Failure in DCA Exam [Q69-Q93]

[Aug-2021] Docker DCA Dumps – Reduce Your Chance of Failure in DCA Exam

To help you achieve your ultimate goal, we suggest the actual Docker DCA dumps for your Docker Certified Associate (DCA) Exam exam preparation to use as your guideline.

NEW QUESTION 69
When seven managers are in a swarm cluster how would they be distributed across three datacenters or availability zones?

• A. 3-3-1
• B. 3-2-2
• C. 4-2-1
• D. 5-1-1

Answer: B

 

NEW QUESTION 70
Which one of the following commands will result in the volume being removed automatically once the container
has exited?

• A. 'docker run --del -v /foo busybox'
• B. 'docker run --remove -v /foo busybox'
• C. 'docker run --read-only -v /foo busybox'
• D. 'docker run --rm -v /foo busybox'

Answer: D

 

NEW QUESTION 71
Some Docker images take time to build through a Continuous Integration environment. You want to speed up builds and take advantage of build caching.
Where should the most frequently changed part of a Docker image be placed in a Dockerfile?

• A. at the top of the Dockerfile
• B. after the FROM directive
• C. at the bottom of the Dockerfile
• D. in the ENTRYPOINT directive

Answer: C

 

NEW QUESTION 72
What is the difference between the ADD and COPY dockerfile instructions? (choosen 2)

• A. COPY supports regular expression handling while ADD does not.
• B. ADD supports regular expression handling while COPY does not.
• C. ADD support remote URL handling while COPY does not.
• D. COPY supports compression format handling while ADD does not.
• E. ADD supports compression format handling while COPY does not.

Answer: B,C

 

NEW QUESTION 73
Which of the following commands will create a swarm service which only listens on port 53 using the UDP protocol?

• A. docker service create --name dns-cache -p 53:53 --udp dns-cache
• B. docker service create --name dns-cache -p 53:53/udp dns-cache
• C. docker service create --name dns-cache -p 53:53 --service udp dns-cache
• D. docker service create --name dns-cache -p 53:53 ..constraint
  networking.protocol.udp=true dns-cache

Answer: B

 

NEW QUESTION 74
The Kubernetes yaml shown below describes a clusterIP service.

Is this a correct statement about how this service routes requests?
Solution: Traffic sent to the IP of any pod with the label app: nginx on port 8080 will be forwarded to port 80 in that pod.

• A. No
• B. Yes

Answer: B

 

NEW QUESTION 75
Will this command display a list of volumes for a specific container?
Solution: 'docker container inspect nginx'

• A. No
• B. Yes

Answer: B

 

NEW QUESTION 76
Which of the following is true about overlay networks?

• A. Overlay networks are only created on the manager nodes.
• B. Overlay networks are created only on the manager node that you created the overlay networking on
• C. Overlay networks are created on all cluster nodes when you create the overlay network.
• D. Overlay networks are first created on the manager nodes. Then they are created on the worker nodes once a task is scheduled on the specific worker node.

Answer: C

Explanation:
Explanation

 

NEW QUESTION 77
The following Docker Compose file is deployed as a stack:

Is this statement correct about this health check definition?
Solution: Health checks test for app health ten seconds apart. Three failed health checks transition the container into "unhealthy" status.

• A. No
• B. Yes

Answer: B

 

NEW QUESTION 78
You want to provide a configuration file to a container at runtime. Does this set of Kubernetes tools and steps accomplish this?
Solution: Mount the configuration file directly into the appropriate pod and container using the .spec.containers.configMounts key.

• A. No
• B. Yes

Answer: A

 

NEW QUESTION 79
Does this describe the role of Control Groups (cgroups) when used with a Docker container?
Solution: role-based access control to clustered resources

• A. No
• B. Yes

Answer: A

 

NEW QUESTION 80
Your organization has a centralized logging solution, such as Splunk.
Will this configure a Docker container to export container logs to the logging solution?
Solution: docker system events --filter splunk

• A. No
• B. Yes

Answer: A

 

NEW QUESTION 81
Following the principle of least privilege, which of the following methods can be used to securely grnt access to the specific user to communicate to a Docker engine? (Choose two.)

• A. Utilize the '--host 127.0.0.1:2375' option to the Docker daemon to listen on port 2375 over TCP on localhost
• B. Utilize openssl to create TLS client and server certificates, configuring the Docker engine to use with mutual TLS over TCP.
• C. Give the user root access to the server to allow them to run Docker commands as root.
• D. Utilize the '--host 0.0.0.0:2375' option to the Docker daemon to listen on port 2375 over TCP on all interfaces
• E. Add the user to the 'docker' group on the server or specify the groue with the '--group' Docker daemon option.

Answer: B,E

 

NEW QUESTION 82
The output of which command can be used to find the architecture and operating system an image is
compatible with?

• A. docker image inspect --format {{.Architecture}} {{.OS}} ' <image-id>
• B. docker image ls <image-id>
• C. docker image info <image-id>
• D. docker image inspect --filter {{.Architecture}} {{.OS}} ' <image-id>

Answer: A

 

NEW QUESTION 83
The Kubernetes yaml shown below describes a networkPolicy.

Will the networkPolicy BLOCK this traffic?
Solution: a request issued from a pod lacking the tier: api label, to a pod bearing the tier: backend label

• A. No
• B. Yes

Answer: B

 

NEW QUESTION 84
Two development teams in your organization use Kubernetes and want to deploy their applications while ensuring that Kubernetes-specific resources, such as secrets, are grouped together for each application.
Is this a way to accomplish this?
Solution: Create one namespace for each application and add all the resources to it.

• A. No
• B. Yes

Answer: A

 

NEW QUESTION 85
What is one way of directly transferring a Docker Image from one Docker host in another?

• A. There is no way of directly transferring Docker images between hosts. A Docker Registry must be used ad an intermediary.
• B. 'docker commit' to save the image outside of the Docker filesystem. Then transfer the file over to the target host and 'docker start' to start the container again.
• C. 'docker push' the image to the IP address of the target host.
• D. 'docker save' the image to save it as TAR file and copy it over to the target host. Then use 'docker load' to un-TAR the image back as a Docker image.

Answer: D

 

NEW QUESTION 86
The Kubernetes yaml shown below describes a networkPolicy.

Will the networkPolicy BLOCK this traffic?
Solution: a request issued from a pod bearing the tier: backend label, to a pod bearing the tier: frontend label

• A. No
• B. Yes

Answer: A

 

NEW QUESTION 87
Two pods bear the same label, app: dev.
Will a label selector matching app: dev match both of these pods?

• A. Yes, if both pods were pre-existing when the label selector was declared.
• B. Yes, as long as all the containers in those pods are passing their livenessProbes and readinessProbes.
• C. Yes, if the pods are in the same Kubernetes namespace as the object bearing the label selector and both pods were preexisting when the label selector was declared.
• D. Yes, if the pods are in the same Kubernetes namespace as the object bearing the label selector

Answer: C

 

NEW QUESTION 88
Will this command ensure that overlay traffic between service tasks is encrypted?
Solution: docker service create --network --encrypted

• A. No
• B. Yes

Answer: A

 

NEW QUESTION 89
Which 'docker run' flag lifts cgroup limitations?

• A. 'docker run --privileged'
• B. 'docker run --cpu-period'
• C. 'docker run --cap-drop'
• D. 'docker run --isolation'

Answer: A

 

NEW QUESTION 90
Following the principle of least privilege, which of the following methods can be used to securely grnt access to the specific user to communicate to a Docker engine? (Choose two.)

• A. Utilize the '--host 127.0.0.1:2375' option to the Docker daemon to listen on port 2375 over
  TCP on localhost
• B. Give the user root access to the server to allow them to run Docker commands as root.
• C. Utilize the '--host 0.0.0.0:2375' option to the Docker daemon to listen on port 2375 over
  TCP on all interfaces
• D. Utilize openssl to create TLS client and server certificates, configuring the Docker engine to
  use with mutual TLS over TCP.
• E. Add the user to the 'docker' group on the server or specify the grouè with the '--group' Docker daemon option.

Answer: D,E

 

NEW QUESTION 91
Is this a function of UCP?
Solution: enforces the deployment of signed images to the cluster

• A. No
• B. Yes

Answer: A

 

NEW QUESTION 92
What is the difference between a resource limit and a resource reservation when scheduling services?

• A. A resource limit is a soft limit for your service, while a reservation is hard limit and the docker engine will do its best to keep your service at the limit.
• B. A resource limit is hard limit for your service, while a reservation is used to find a host with adequate
  resources for scheduling. Correct
• C. A resource limit is used to find a host with adequate resources for scheduling a hard limit for your service, while a reservation is hard limit for your service.
• D. A resource limit and a resource reservation can be used interchangeably.

Answer: D

 

NEW QUESTION 93
......

100% Free DCA Demo-Trial [Pdf], get it now: https://drive.google.com/open?id=1Q9gTslyjrTdeROrBg4V7Ikt-_NKNrstL

Accurate & Verified Answers As Seen in the Real Exam here: https://www.realvce.com/DCA_free-dumps.html