2023 Updated Verified DCA dumps Q&As - 100% Pass Guaranteed [Q48-Q70] : Valid Premium Exam : http://premium.validexam.com

NEW QUESTION 48
You configure a local Docker engine to enforce content trust by setting the environment variable
DOCKER_CONTENT_TRUST=1.
If myorg/myimage: 1.0 is unsigned, does Docker block this command?
Solution: docker image import <tarball> myorg/myimage:1.0

Yes

NEW QUESTION 49
Is this an advantage of multi-stage builds?
Solution: optimizes Images by copying artifacts selectively from previous stages

Yes

NEW QUESTION 50
In Docker Trusted Registry, is this how a user can prevent an image, such as ‘nginx:latest’, from being overwritten by another user with push access to the repository?
Solution: Use the DTR web Ul to make all tags in the repository immutable.

Yes

NEW QUESTION 51
Your organization has a centralized logging solution, such as Splunk.
Will this configure a Docker container to export container logs to the logging solution?
Solution: Set the log-driver and log-oPt keys to values for the logging solution (Splunk) In the daemon.json file.

Yes

NEW QUESTION 52
You created a new service named ‘http’ and discover it is not registering as healthy. Will this command enable you to view the list of historical tasks for this service?
Solution: ‘docker service inspect http’

Yes

NEW QUESTION 53
Is this statement correct?
Solution: A Dockerfile provides instructions for building a Docker image

Yes

NEW QUESTION 54
You have deployed a service to swarm. Which command uses the Docker CLI to set the number of tasks of the services to 5? (choose 2)

‘docker service update –replicas=5 <service-id>’

‘docker replica update <service-id>=5’

‘docker update service <service-id>=5’

‘docker service replicas <service-id>=5’

‘docker service scale <service-id> = 5”

NEW QUESTION 55
Will this command ensure that overlay traffic between service tasks is encrypted?
Solution: docker service create –network –secure

Yes

NEW QUESTION 56
You want to mount external storage to a particular filesystem path in a container in a Kubernetes pod. What is the correct set of objects to use for this?

a volume in the pod specification, populated with a perslstentVolumeClaim bound to a perslstentVolume defined by a storageClass

a storageClass In the pod’s specification, populated with a volume which Is bound to a provisioner defined by a persistentVolume

a volume in the pod specification, populated with a storageClass which is bound to a provisioner defined by a perslstentVolume

a perslstentVolume in the pod specification, populated with a persistentVolumeClaim which is bound to a volume defined by a storageClass

NEW QUESTION 57
What is the difference between a resource limit and a resource reservation when scheduling services?

A resource limit and a resource reservation can be used interchangeably.

A resource limit is a soft limit for your service, while a reservation is hard limit and the docker engine will do its best to keep your service at the limit.

A resource limit is used to find a host with adequate resources for scheduling a hard limit for your service, while a reservation is hard limit for your service.

A resource limit is hard limit for your service, while a reservation is used to find a host with adequate
resources for scheduling. Correct

NEW QUESTION 58
Will this command mount the host’s ‘/data’ directory to the ubuntu container in read-only mode?
Solution: ‘docker run –add-volume /data /mydata -read-only ubuntu’

Yes

NEW QUESTION 59
Which networking drivers allow you to enable multi-host network connectivity between containers?

macvlan, ipvlan, and overlay

bridge, user-defined, host

bridge, macvlan, ipvlan, overlay

host, macvlan, overlay, user-defined

NEW QUESTION 60
Are these conditions sufficient for Kubernetes to dynamically provision a persistentVolume, assuming there are no limitations on the amount and type of available external storage?
Solution: A default storageClass is specified, and subsequently a persistentVolumeClaim is created.

Yes

NEW QUESTION 61
Which of the following are types of namespaces used by Docker to provide isolation? (Choose 2.)

Authentication

Process ID

Storage

Network

Host

NEW QUESTION 62
A docker service ‘web’ is running with a scale factor of 1 (replicas = 1).
Bob intends to use the command ‘docker service update –replicas=3 web’.
Alice intends to use the command ‘docker service scale web=3’.
How do the outcomes oft these two commands differ?

Bob’s command results in an error. Alice’s command updates the number of replicas of the ‘web’ service to 3.

Bob’s command only updates the service definition, but no new replicas are started. Alice’s command
results in the actual scaling up of the ‘web’ service.

Bob’s command updates the number of replicas of the ‘web’ service to 3. Alice’s command results in an error.

Both Bob’s and Alice’s commands result in exactly the same outcome, which is 3 instances of the ‘web’ service.

NEW QUESTION 63
What is the purpose of multi-stage builds?

Better logical separation of Dockerfile instructions for better readability

Optimizing images by copying artifacts selectively from previous stages

Better caching when building Docker images

Faster image builds by allowing parallel execution of Docker builds

NEW QUESTION 64
A host machine has four CPUs available and two running containers. The sysadmin would like to assign two CPUs to each container.
Which of the following commands achieves this?

Set the ‘–cpuset-cpu’s flag to ‘1.3’ on one container and ‘2.4’ on the other container.

Set the ‘–cpuset-cpus’ flag to ‘.5’ on both containers

Set the ‘–cpuset-cpus’ flag of the ‘dockerd’ process to the value ‘even-spread’

Set the ‘–cpu-quota’ flag to ‘1.3’ on one container and ‘2,4’ on the other container.

NEW QUESTION 65
Is this a function of UCP?
Solution: enforces the deployment of signed images to the cluster

Yes

NEW QUESTION 66
How do you configure Docker engine to use a registry that is not configured with TLS certificates from a trusted CA?

Set IGNORE_TLS in the ‘daemon.json’ configuration file.

Set and export the IGNORE_TLS environment variable on the command line

Set INSECURE_REGISTRY in the ‘/etc/docker/default’ configuration file

Pass the ‘–insecure.-registry’ flag to the daemon at run time

NEW QUESTION 67
Will this sequence of steps completely delete an image from disk in the Docker Trusted Registry?
Solution: Delete the image and delete the image repository from Docker Trusted Registry

Yes

NEW QUESTION 68
When an application being managed by UCP fails, you would like a summary of all requests made to the UCP API in the hours leading up to the failure.
What must be configured correctly beforehand for this to be possible?

All engines in the cluster must have their log driver set to the metadata’ or request’ level.

UCP logging levels must be set to the info’ or debug’ level.

Set the logging level in theconfig object for the ucp-kube-api-server container to warning or higher.

UCP audit logs must be set to the metadata’ or request’ level.

NEW QUESTION 69
Does this command display all the pods in the cluster that are labeled as ‘env: development’?
Solution: ‘kubectl get pods –all-namespaces -I env=development’

Yes

NEW QUESTION 70
Is this a type of Linux kernel namespace that provides container isolation?
Solution: Storage

Yes