[2022年03月30日]GoShiken DCA試験練習テスト問題（更新された170問あります)
合格させるDocker DCA試験情報と無料練習テスト
質問 88
Will this sequence of steps completely delete an image from disk in the Docker Trusted Registry?
Solution: Delete the image and delete the image repository from Docker Trusted Registry
- A. Yes
- B. No
正解: A
質問 89
Are these conditions sufficient for Kubernetes to dynamically provision a persistentVolume, assuming there are no limitations on the amount and type of available external storage?
Solution: A default provisioner is specified, and subsequently a persistentVolumeClaim is created.
- A. No
- B. Yes
正解: A
質問 90
Which flag for a service would allow a container to consume more than 2 GB of memory only when there is no memory contention but would also prevent a container from consuming more than 4GB of memory, in any case?
- A. --limit-memory 2GB --reserve-memory 4GB
- B. --limit-memory 4GB --reserve-memory 2GB
- C. --memory-swap 2GB --limit-memory 4GB
- D. --memory-swap 4GB --limit-memory 2GB
正解: C
質問 91
An application image runs in multiple environments, and each environment uses different certificates and ports, what is the best practice to deploy the containers?
- A. Create a config file for each environment.
- B. Create a Dockerfile for each environment, specifying ports and Docker secrets for certificates.
- C. Create a Dockerfile for each environment, specifying ports and ENV variables for certificates.
- D. Create images that contain the specific configuration for every environment.
正解: A
質問 92
What service mode is used to deploy a single task of a service to each node?
- A. universal
- B. spread
- C. distributed
- D. replicated
- E. global
正解: E
質問 93
Will this action upgrade Docker Engine CE to Docker Engine EE?
Solution: Uninstall 'docker-ce' package before installing 'docker-ee' package.
- A. Yes
- B. No
正解: A
質問 94
A Kubernetes node is allocated a /26 CIDR block (64 unique IPs) for its address space.
If every pod on this node has exactly two containers in it, how many pods can this address space support on this node?
- A. 32 In every Kubernetes namespace
- B. 0
- C. 64 for every service routing to pods on this node
- D. 1
正解: C
質問 95
Which networking drivers allow you to enable multi-host network connectivity between containers?
- A. bridge, user-defined, host
- B. host, macvlan, overlay, user-defined
- C. macvlan, ipvlan, and overlay
- D. bridge, macvlan, ipvlan, overlay
正解: C
質問 96
A server is running low on disk space. What command can be used to check the disk usage of images, containers, and volumes for Docker engine?
- A. 'docker system df'
- B. 'docker system free'
- C. 'docker system ps'
- D. 'docker system prune'
正解: A
質問 97
Will this configuration achieve fault tolerance for managers in a swarm?
Solution: only two managers, one active and one passive.
- A. No
- B. Yes
正解: A
質問 98
Will this configuration achieve fault tolerance for managers in a swarm?
Solution: an odd number of manager nodes, totaling more than two
- A. Yes
- B. No
正解: A
質問 99
Wha is the purpose of Docker Content Trust?
- A. Docker registry TLS verification and encryption
- B. Signing and verification of image tags
- C. Indicating an image on Docker Hub is an official image
- D. Enabling mutual TLS between the Docker client and server
正解: B
質問 100
When using the Docker client to push an image to a registry, what environment variable is used to instruct the client to perform signing of the image?
- A. DOCKER_PUSH_SIGN=1
- B. NOTARY_ENABLE=1
Correct - C. DOCKER_CONTENT_TRUST=1
- D. DOCKER_IMAGE_SIGN=1
正解: C
質問 101
What is the docker command to setup a swarm?
- A. docker init swarm
- B. docker swarm init
- C. docker swarm create
- D. docker create swarm
正解: B
解説:
Explanation
https://docs.docker.com/engine/reference/commandline/swarm/
質問 102
What is the recommended way to configure the daemon flags and environment variables for your Docker daemon in a platform independent way?
- A. Set the configuration options using the ENV variable
- B. Set the configuration DOCKER_OPTS in '/etc/default/docker'
- C. Set the configuration options in '/etc/docker/daemon.json'
- D. Using 'docker config' to set the configuration options.
正解: C
質問 103
Will this command display a list of volumes for a specific container?
Solution: docker container logs nginx --volumes'
- A. No
- B. Yes
正解: A
質問 104
In Docker Trusted Registry, how would a user prevent an image, for example 'nginx:latest' from being overwritten by another user with push access to the repository?
- A. Keep a backup copy of the image on another repository.
- B. Tag the image with 'nginx:immutable'
- C. Use the DTR web UI to make the tag immutable.
- D. Remove push access from all other users.
正解: C
質問 105
Will this command ensure that overlay traffic between service tasks is encrypted?
Solution: docker service create --network --secure
- A. No
- B. Yes
正解: A
質問 106
A company's security policy specifies that development and production containers must run on separate nodes in a given Swarm cluster.
Can this be used to schedule containers to meet the security policy requirements?
Solution: node taints
- A. No
- B. Yes
正解: A
質問 107
Will this command list all nodes in a swarm cluster from the command line?
Solution: 'docker node Is'
- A. No
- B. Yes
正解: A
質問 108
Your organization has a centralized logging solution, such as Splunk.
Will this configure a Docker container to export container logs to the logging solution?
Solution: Set the log-driver and log-oPt keys to values for the logging solution (Splunk) In the daemon.json file.
- A. Yes
- B. No
正解: A
質問 109
One of several containers in a pod is marked as unhealthy after failing its livenessProbe many times. Is this the action taken by the orchestrator to fix the unhealthy container?
Solution: The controller managing the pod is autoscaled back to delete the unhealthy pod and alleviate load.
- A. Yes
- B. No
正解: A
質問 110
How do you configure Docker engine to use a registry that is not configured with TLS certificates from a trusted CA?
- A. Set IGNORE_TLS in the 'daemon.json' configuration file.
- B. Pass the '--insecure.-registry' flag to the daemon at run time
- C. Set INSECURE_REGISTRY in the '/etc/docker/default' configuration file
- D. Set and export the IGNORE_TLS environment variable on the command line
正解: B
質問 111
Will this command mount the host's '/data' directory to the ubuntu container in read-only mode?
Solution: 'docker run -v /data:/mydata --mode readonly ubuntu'
- A. Yes
- B. No
正解: A
質問 112
Which 'docker run' flag lifts cgroup limitations?
- A. 'docker run --isolation'
- B. 'docker run --cap-drop'
- C. 'docker run --privileged'
- D. 'docker run --cpu-period'
正解: C
質問 113
......
あなたを合格させるDocker試験にはDCA試験問題集：https://www.goshiken.com/Docker/DCA-mondaishu.html
DCA試験問題集PDF更新された問題集にはGoShiken試験合格保証付き：https://drive.google.com/open?id=1J89GkaSDIg8llIghKb5QaYTkHhk2muA2