Docker Practice Exam 2

1) Where is the default location of the Docker daemon configuration file?

a) /opt/docker/daemon.json

b) /etc/docker/config/daemon.json

c) /etc/docker/daemon.json

d) /etc/docker/daemon/config.json

2) When installing UCP on a host, docker requires that specific ports are

open. Which port that used by docker for a TLS proxy provides access to

UCP, Docker Engine, and Docker Swarm?

a) TCP/12380

b) TCP/12379

c) TCP/12376

d) UDP/12379

3) What is the maximum timeout for Raft consensus between manager

nodes?

a) 4000ms

b) 5000ms

c) 10000ms

d) 90000ms

4) Before installing UCP, make sure that all nodes that UCP manages are:

a) Have an internet connection

b) Running the same version of Docker Engine

c) Use insecure registries

d) Dynamic IP addresses for all nodes

5) What is the service that automatically starts serving all UCP components,

including the UCP web UI and data stores used by UCP?

a) ucp-daemon

b) docker-engine

c) ucp-agent

d) docker-ucp

6) What is the service that performs scheduled LDAP synchronizations and

cleans authentication and authorization data?

a) ucp-auth-api

b) ucp-engine

c) ucp-agent

d) ucp-auth-worker

7) Which log drivers writes log messages as Event Tracing for Windows

(ETW) events?

a) etwlogs

b) dockeretw

c) logentries

d) syslog

8) Which Docker’s technology allows Docker Engine to share available

hardware resources to containers and optionally enforce limits and

constraints?

a) aufs

b) cgroups

c) namespaces

d) libcontainer

9) Which one of the following commands enables you to scale one or more

replicated services either up or down to the desired number of replicas?

a) scale

b) replica

c) join

d) swarm

10) Which algorithm does Docker use to make manage the global cluster

state?

a) Rough Convention

b) Raft Consensus

c) Semi-Distributed Consensus

d) Round-robin

11) Which one of the following commands displays detailed information on

one or more nodes?

a) docker node info

b) docker node inspect

c) docker node ps

d) docker node ls

12) Which one of the following commands deploys a new stack or updates

an existing stack?

a) docker stack attach

b) docker stack update

c) docker stack services

d) docker stack deploy

13) Which one of the following commands is used to connect a running

container to multiple networks ?

a) docker network attach

b) docker network join

c) docker network connect

d) docker network attach

14) Which one of the following command to creates a swarm then

configures the manager node to publish its address at specific IP?

a) docker swarm init —expose <IP_ADDRESS>

b) docker swarm init —advertise-addr <IP_ADDRESS>

c) docker swarm connect <IP_ADDRESS>

d) docker swarm —publish-addr <IP_ADDRESS>

15) Which command-line flag will enable the user to create a new container

mount from a specific volume?

a) —volume

b) —volumes-from

c) —mount-from

d) —mounted-in

16) Where is the default directory that used by Docker manager to store the

swarm state and manager logs?

a) /var/lib/docker/swarm/

b)/var/lib/docker/swarm/logs

c)/var/log/docker/swarm/

d)/var/lib/docker/logs/

17) Which command-line flag will enable autolocking of swarm manager

nodes when Docker restarts?

a) —auto-lock

b) —autolock

c) —enable-autolock

d) —enable-auto-lock

18) What is default Docker database mode to store login token from local

client to the swarm nodes where the service is deployed?

a) plain-text file

b) encrypted md5

c) encrypted WAL logs

d) encrypted AES logs

19) How many tokens will manager node generate when you join additional

nodes to the swarm?

a) one . Worker token only

b) one. Manager token only

c) Two. one worker token and one manager token

d) None of the above

20) If you want to mount windows directory C:\Projects\webapp into

docker using centos baseimage, what is the correct syntax?

a) $ docker run --ti --rm -v //c/Projects/webapp:/opt/webapp centos

b) $ docker run --ti --rm -v /opt/webapp://c/Projects/webapp centos

c) $ docker run --ti --rm -v “c:/Projects/webapp:/opt/webapp” centos

d) $ docker run --ti --rm -v —mount

c/Users/Chris/Projects/webapp:/opt/webapp centos

21) Which driver uses block devices dedicated to Docker and operates at

the block level, rather than the file level?

a) SELinux

b) LXC

c) devicemapper

d) IPC

22) The devicemapper storage driver uses an allocate-on-demand operation

to allocate new blocks from the thin pool into a container’s writable layer.

What is the size of each block?

a) 256K

b) 128K

c) 64K

d) 32K

23) Which parameter specifies the percentage of space used before lvm

attempts to auto extend the available space?

a) thin_pool_autoextend_storage

b) thin_pool_autoextend_threshold

c) thin_pool_autoextend_percent

d) thin_pool_autoextend_lvm

24) Which parameter specifies the amount to add to the device when

automatically extending?

a) thin_pool_autoextend_storage

b) thin_pool_autoextend_threshold

c) thin_pool_autoextend_percent

d) thin_pool_autoextend_lvm

25) Which options command tells the container to destroy itself as soon as

it finishes?

a) -d

b) —rm

c) —ti

d) —it

26) Which options command connects two containers?

a) -d

b) —ti

c) —link

d) —connect

27) Which one of the following dockerfile instructions moves a file/folder

into the image but does not work on remote files?

a) ADD

b) ARCHIVE

c) COPY

d) VOLUME

28) Which command that reconnects to a container that is running in the

background?

a) $ docker connect

b) $ docker link

c) $ docker attach

d) $ docker start

29) Which command will save a layer and make a new image from the

running or stopped container?

a) $ docker archive

b) $ docker commit

c) $ docker build

d) $ docker export

30) To look for files which changed since the container started which

command would you use?

a) imagestreams

b) layer

c) diff

d) tree

31) Which docker restart policies ensure docker restarts the container if it

fails nonzero exit code?

a) no

b) always

c) restart

d) on-failure

32) Which command views the approximate size of a running container?

a)docker ps -s

b) docker ls

c) docker info container

d) docker images

33) In Docker Content Trust, which key enables creators cab push or pull

any tags in a specific repository and resides on the client-side?

a) Repository key

b) Tagging key

c) Offline key

d) Timestamp key

34) If Content Trust enabled for the first time, which one of the following

keys will not be generated automatically for the image repository?

a) root

b) target

c) offline

d) timestamp

35) If you want to map port 5672 on the host to port 80 on the container,

what is the correct syntax?

a) $ docker run -ti —portforward 5672:80 ubuntu /bin/bash

b) $ docker run -ti - 80:5672 ubuntu /bin/bash

c) $ docker run -ti -p 80:5672 ubuntu /bin/bash

d) $ docker run -ti -p 5672:80 ubuntu /bin/bash

36) Which one of the following ports needs to be open for container ingress

network?

a) 3789

b) 6789

c) 5789

d) 4789

37) When you initialize a swarm , which one of the new networks connects

the individual Docker daemon to the other daemons participating in the

swarm?

a) docker_gwbridge

b) ingress

c) egress

d) overlay

38) When you initialize a swarm, which one of the new networks handles

control and data traffic related to swarm services?

a) docker_gwbridge

b) ingress

c) egress

d) overlay

39) Which one of the following ports needs to be open for communication

among nodes?

a) TCP UDP 2377

b) TCP 2377

c) UDP 4789

d) TCP UDP 7946

40) What is default encryption for swarm service management traffic?

a) SHA

b) AES

c) DES

d) PGP

41) Which Docker network control plane components utilizes direct and

indirect messages to rule out network congestion?

a) Failure Detection

b) Message Dissemination

c) Topology Aware

d) Control Plane Encryption

42) Which Docker-distributed network control plane protocol propagates

network state information and topology across Docker container clusters?

a) SWIM

b) VXLAN

c) Gossip

d) IPAM

43) Not all resources that a container has access to are namespaced.

Resources that are NOT namespaced are the same on the host and in

containers, such as:

a) Image ID

b) Network Interface

c) Inodes

d) UIDs

44) Which type of manifest describing the constituent parts of a Docker

image?

a) CRC

b) SHA-256

c) MD5

d) SHASUM

45) Which command-line flag will enable the user to limit the specific

amount of resources while executing `docker run` ?

a) —limit

b) —siglimit

c) —ulimit

d) —setrlimit

46) Which Linux Security Modules is used by Docker to provide another

level of security checks on the access rights of processes and users beyond

that provided by the standard file-level access control?

a) iptables

b) SELinux

c) MCS

d) DARPA

47) Which of the following commands will not operate with content trust?

a) pull

b) push

c) inspect

d) run

48) Which one of the following flag commands to run individual operations

on tagged images without content trust?

a) —docker-content-trust=false

b) —skip-tls-verify

c) —insecure-registry

d) —disable-content-trust

49) Which component of Docker EE verifies images to be signed before

deployment?

a) Worker

b) DTR

c) UCP

d) Docker Content Trust

50) Which one of the following option in LDAP authentication ensures that

the only LDAP accounts that exist in UCP are those that have had a user

login to UCP?

a) Post-login User Provisioning

b) User-Defined User Provisioning

c) Auto User Provisioning

d) Just-In-Time User Provisioning

Practice Exam 2 Answer Key

1) c

2) c

3) b

4) b

5) c

6) d

7) a

8) b

9) a

10) b

11) b

12) d

13) c

14) b

15) b

16) a

17) b

18) c

19) c

20) a

21) c

22) d

23) b

24) c

25) b

26) c

27) c

28) c

29) b

30) c

31) d

32) a

33) b

34) c

35) d

36) d

37) a

38) b

39) d

40) b

41) a

42) c

43) d

44) b

45) c

46) b

47) c

48) d

49) c

50) d