QUESTION 27
You have just executed ‘docker swarm leave’ on a node. What command can be run on the same node to confirm it has left the cluster?

QUESTION 28
Is this the purpose of Docker Content Trust?
Solution: Verify and encrypt Docker registry TLS.

QUESTION 29
The following health check exists in a Dockerfile:
‘HEALTCHECK CMD curl –fail http://localhost/health || exit 1’
Which of the following describes its purpose?

QUESTION 30
Is this a Linux kernel namespace that is disabled by default and must be enabled at Docker engine runtime to be used?
Solution: net

QUESTION 31
During development of an application meant to be orchestrated by Kubernetes, you want to mount the /data directory on your laptop into a container.
Will this strategy successfully accomplish this?
Solution: Create a PersistentVolume with storageciass: “” and hostPath: /data, and a persistentVolumeClaim requesting this PV. Then use that PVC to populate a volume in a pod

QUESTION 32
You want to create a container that is reachable from its host’s network. Does this action accomplish this?
Solution: Use either EXPOSE or –publish to access the containers on the bridge network

QUESTION 33
Will this command list all nodes in a swarm cluster from the command line?
Solution: ‘docker swarm nodes’

QUESTION 34
Is this an advantage of multi-stage builds?
Solution: optimizes Images by copying artifacts selectively from previous stages

QUESTION 35
Seven managers are in a swarm cluster.
Is this how should they be distributed across three datacenters or availability zones?
Solution: 3-3-1

QUESTION 36
You have created a Docker bridge network on a host with three containers attached, how do you make this containers accessible outside of the host?

QUESTION 37
A company’s security policy specifies that development and production containers must run on separate nodes in a given Swarm cluster.
Can this be used to schedule containers to meet the security policy requirements?
Solution: label contraints

QUESTION 38
Will this command ensure that overlay traffic between service tasks is encrypted?
Solution: docker network create -d overlay -o encrypted=true <network-name>

QUESTION 39
A docker service ‘web’ is running with a scale factor of 1 (replicas = 1).
Bob intends to use the command ‘docker service update –replicas=3 web’.
Alice intends to use the command ‘docker service scale web=3’.
How do the outcomes oft these two commands differ?

QUESTION 40
Will a DTR security scan detect this?
Solution: licenses for known third party binary components

QUESTION 41
Does this command display all the pods in the cluster that are labeled as ‘env: development’?
Solution: ‘kubectl get pods -I env=development’

QUESTION 42
What behavior is expected when a service is created with the following command:
‘docker service create –publish 8000:80 nginx’

QUESTION 43
You set up an automatic pruning policy on a DTR repository to prune all images using Apache licenses. What effect does this have on images in this repository?

QUESTION 44
Two pods bear the same label, app: dev.
Will a label selector matching app: dev match both of these pods?

QUESTION 45
You want to provide a configuration file to a container at runtime. Does this set of Kubernetes tools and steps accomplish this?
Solution: Mount the configuration file directly into the appropriate pod and container using the .spec.containers.configMounts key.