Docker Practice Exam 1
1) Which command will allow you to execute and commit the results of any
command in a new layer on top of the current image?
a) FROM
b) RUN
c) CMD
d) INIT
2) What does the EXPOSE command do?
a) Inform docker to listen to all ports
b) Informs Docker which directory container will expose to public on at
runtime
c) Informs Docker which network ports the container will listen on at
runtime
d) None of the above.
3) Which default directory will Docker store its image layers?
a) /run/layers/docker
b) /etc/docker/storage
c) /tmp/docker/layers
d) /var/lib/docker/<storage-driver>/layers
4) What is the minimum number of managers nodes required for an HA
setup?
a) 1 node
b) 2 nodes
c) 3 nodes
d) 4 nodes
5) Which command will allow the user “john” to run Docker commands,
without needing elevated privileges?
a) usermod -aG docker john
b) service start docker --enabled
c) chown -R john:john /var/lib/docker
d) None of the above.
6) Which command will allow the user to monitor the state of the Docker
daemon service?
a) cat /var/run/docker/info
b) service docker status=info
c) docker get status
d) systemctl status docker
7) Which Docker network interface will be used by default when you run a
new container using “docker run” command?
a) docker0
b) bridge0
c) overlay0
d) eth0
8) Which of the following commands will automatically start the docker
service on boot?
a) systemctl enable docker
b) system start docker --on-boot=true
c) service docker-ce on-boot=true
d) docker-ce --enable-on-boot
9) Which file contains information of of the PID (Process ID) of the Docker
service when it is running?
a) /run/docker.pid
b) /run/docker.sock
c) /var/lib/docker/docker.pid
d) None of the above
10) Which Unix socket file does Docker use to determine which accounts
can use the service?
a) /opt/run/docker.sock
b) /tmp/run/docker.sock
c) /run/docker.sock
d) /run/docker/daemon.sock
11) Which file can be configured to modify the default Docker storage
driver?
a) /var/lib/docker/devicemapper.conf
b) /var/lib/docker/storage.conf
c) /etc/docker/daemon.json
d) /var/lib/docker/volumes/driver.json
12) Which file can be configured to modify the default Docker logging
driver?
a) /etc/docker/daemon.json
b) /var/lib/docker/logging.conf
c) /etc/docker/log.json
d) /var/log/docker/daemon.conf
13) Which command will build a Docker image named “myapps:latest”
using the Docker File available in the current directory?
a) docker build . --name=myapps:latest
b) docker build myapps:latest -t .
c) docker build -t myapps:latest .
d) None of the above.
14) What command can be used to login to the Docker repository “dockerregistry.example.com”
using user “john” ?
a) docker login --username=john --server-url docker-registry.example.com
b) docker login --username=john docker-registry.example.com
c) docker login -u john -h docker-registry.example.com
d) None of the Above
15) Which of the following commands will allow you to run an interactive
shell on a running container?
a) docker run -it [containername] /bin/bash
b) docker ssh [containername]
c) docker exec -d [containername] --interactive /bin/bash
d) docker exec -it [containername] /bin/bash
16) Which of the following commands will allow a user to view all member
nodes of Docker swarm clusters when run on one of the manager nodes?
a) docker node ls
b) docker node --show-members
c) docker swarm node show
d) None of the Above
17) Which command can be used to display logs of a service in Docker
swarm?
a) docker logs --service=[SERVICE NAME]
b) docker service cat --logs [SERVICE NAME]
c) docker service logs [SERVICE NAME]
d) None of the above.
18) Which of the following commands will allow you to scale the service
called ‘frontend’ to FIVE replicas?
a) docker service scale frontend=5
b) docker service scale --replicas=5 frontend
c) docker run frontend --scale=5
d) docker scale swarm --nodes=5
19) Create a service called ‘webapp’ that contains three replicas based on
image called “tomcat-custom”.
a) docker service create --name tomcat-custom --replicas 3 webapp
b) docker service create --name=webapp --number=3 tomcat-custom
c) docker service start name=webapp replicas=3 tomcat-custom
d) docker service create --name webapp --replicas 3 tomcat-custom
20) Which of the following will list all the service processes currently
running in a swarm cluster?
a) docker service ps
b) docker swarm service --list
c) docker ps -a
d) docker swarm --service-list
21) Which of the following commands will allow you to get token needed
for a ‘manager’ node to join an existing cluster?
a) docker swarm get-token manager
b) docker swarm join-token manager
c) docker swarm token-retrieval --manager
d) None of the above.
22) Which command allows you to leave a swarm when executed from the
intended node?
a) docker swarm leave
b) docker swarm rm node
c) docker swarm unregister
d) All of the above.
23) Which of the following commands will allow you to scale the number
of replicas in your swarm to SIX?
a) docker service scale [SERVICE NAME]=6
b) docker service replicas=6
c) docker scale swarm --nodes=6
d) docker swarm nodes=6
24) Which of the following commands would remove a service called
‘myapps’ on your cluster?
a) docker rm --service myapps
b) docker service rm myapps
c) docker rm myapps
d) None of the above.
25) Which of the following commands would temporarily stop a service
called ‘myweb’ on your cluster without actually removing it?
a) docker service scale myweb=0
b) docker service stop myweb
c) docker service rm myweb
d) docker rm myweb
26) Which command will create a swarm service called ‘my_api’ based on
an image called ‘httpd’?
a) docker service create --name httpd my_api
b) docker run --name my_api httpd
c) docker service create --name my_api httpd
d) None of the above.
27) Which command will remove a service called ‘my_apps’ from the
running swarm?
a) docker service stop my_apps
b) docker swarm remove my_apps
c) docker service rm my_apps
d) docker rm my_apps
28) Which of the following are the correct forms to use the CMD
instruction on Docker File (Choose three)?
a) CMD [“executable”,”param1”,”param2”]
b) CMD param1, CMD param2
c) CMD [“param1”,”param2”] (as default parameters to ENTRYPOINT)
d) CMD command param1 param2
29) Which command will drain a specified node to prevent future services
to run on it?
a) docker node update --availability drain [NODE ID]
b) docker node drain=[NODE ID]
c) docker node --availability=down --node=[NODE ID]
d) None of the Above
30) What does DTR stand for in Docker EE?
a) Docker Team Repository
b) Docker Trusted Repository
c) Docker Team Registry
d) Docker Trusted Registry
31) Given a token called ‘kdhgdlgjdighhsdfdf637’ and a manager listen on
10.0.1.100:2237, which of the following commands would allow a node to
join a swarm cluster?
a) docker swarm join --token kdhgdlgjdighhsdfdf637 10.0.1.100:2377
b) docker node join swarm ip 10.0.1.100 --token kdhgdlgjdighhsdfdf637
c) docker swarm --token=kdhgdlgjdighhsdfdf637 --ip=10.0.1.100
d) docker join swarm token kdhgdlgjdighhsdfdf637 --manager=10.0.100
32) Which command can be used to pull a “nginx” with tag “latest” image
from a default public repository?
a) docker pull nginx:latest
b) docker push nginx:latest
c) docker download nginx:latest
d) docker get nginx:latest
33) Which of the following resources would be removed by the “docker
system prune -a” command?
a) All stopped containers
b) All networks not used by at least one container
c) All volumes not used by at least one container
d) All of the above.
34) What is the name of the docker swarm features that enable each node in
the swarm to accept connections on published ports for any service running
in the swarm, even if there’s no task running on the node?
a) ingress-haproxy
b) routing mesh
c) shared-network
d) f5-loadbalancer
35) Which of the following commands will allow you to get the token
needed for a ‘worker’ node to join an existing cluster?
a) docker swarm get-tokens worker
b) docker swarm join-token worker
c) docker swarm token-retrieval --worker
d) All of the above.
36) Which command will restore the ‘drain’ task applied to a node so that it
can be scheduled again for services?
a) docker swarm --node=[NODE ID] --set-active
b) docker node update --availability active [NODE ID]
c) docker node undo [NODE ID]
d) docker node set-active [NODE ID]
37) Which of the following commands would clean up ALL container from
a Docker host?
a) docker image remove --all --force
b) docker rmi --all
c) docker system prune
d) docker rm -f `docker ps -a -q`
38) Which of the following parameters would you use to allow the
container to have access to the host filesystem when using the --mount
options?
a) type=host
b) bind=local
c) type=mount
d) type=bind
39) What is the content of a client bundle zip that was downloaded from
UCP (Choose all that apply)?
a) account security key
b) docker client binary
c) Environment variables files to set the connection destination.
d) UCP certificate files.
40) What does UCP stand for in the Docker EE?
a) Universal Control Plane
b) User Control Plane
c) Universal Control Panel
d) User Control Panel
41) When publishing a container service ports “80” using -P option, which
ports will Docker open on the hosts?
a) The same ports as the container if available, otherwise it will try to use
the closest port number
b) The same ports as the container if available, otherwise the operation fails
c) The -P option will not open any hosts port
d) Random port numbers above port 32768 on the host
42) Which of the following network drivers will remove network isolation
between the container and the Docker host and use the host’s networking
directly?
a) host
b) docker_gwbridge
c) overlay
d) None of the above.
43) Which of the following built-in networks will connect multiple Docker
daemons together and enable swarm services to communicate with each
other?
a) Default
b) Host
c) Overlay
d) Bridge
44) What command is used to stop a running container called “hello-world”
without deleting it? Choose all that apply.
a) docker stop hello-world
b) docker stop container hello-world
c) docker container stop hello-world
d) docker container pause hello-world
45) What does MTLS stand for?
a) Mini Transport Layer System
b) Mutual Transport Layer Security
c) Main Transport Secure Layer
d) None of the above.
46) What is the main language used in Docker?
a) Oracle
b) Java
c) Go
d) C#
47) Which environment variable must be set on the host to instruct docker
to ONLY download Docker trusted images?
a) DOCKER_CONTENT_TRUST=1
b) DOCKER_TRUSTED_CONTENT=1
c) DOCKER_SIGNED_IMAGE=1
d) DOCKER_IMAGE_TRUST=1
48) Which command will display ALL containers in a host , including the
stopped one?
a) docker psaux
b) docker run list container
c) docker container list all
d) docker ps -a
49) Which of the following commands will create a secret called
“mysecret” using a file named “encrypted_password.txt”?
a) docker register secret name=mysecret ./encrypted_password.txt
b) docker secret create mysecret ./encrypted_password.txt
c) docker create secret name=mysecret ./encrypted_password.txt
d) docker create secret name=mysecret --from-file=
./encrypted_password.txt
50) Which service does UCP 3.0 use for the application routing layer ?
a) haproxy
b) f5
c) cisco router
d) interlock
Practice Exam 1 Answer Key
1) b
2) c
3) d
4) c
5) b
6) d
7) a
8) a
9) a
10) c
11) c
12) a
13) c
14) b
15) d
16) a
17) c
18) a
19) d
20) a
21) b
22) a
23) a
24) b
25) c
26) c
27) c
28) a, c, d
29) a
30) d
31) a
32) c
33) d
34) b
35) b
36) b
37) d
38) d
39) a, c, d
40) d
41) d
42) a
43) c
44) a, c
45) b
46) c
47) a
48) d
49) b
50) d