[2023年10月]更新のDocker DCAテストエンジンとPDFで完全版無料問題集を無料提供
最新版を今すぐ試そうDCA認定有効な試験問題集
DCA試験は、候補者がライブ環境で一連のタスクを完了する必要があるパフォーマンスベースの試験です。この試験は、実世界のシナリオでDockerコンテナを操作する能力をテストするよう設計されています。候補者は、Dockerコンテナの展開、管理、トラブルシューティングの熟練度を示さなければなりません。DCA認定は2年間有効であり、再認定試験に合格することで更新することができます。
DCA認定試験は、Dockerと協力するITの専門家、開発者、およびシステム管理者向けに設計されています。試験に合格した候補者は、Dockerを使用してコンテナ内のアプリケーションを構築、出荷、および実行する能力を示しています。この試験では、Dockerの基本、Dockerfile、画像作成、Docker Swarmによるコンテナオーケストレーション、Dockerネットワーキングとセキュリティなど、さまざまなトピックをカバーしています。
質問 # 39
Will this Linux kernel facility limit a Docker container's access to host resources, such as CPU or memory?
Solution: seccomp
- A. No
- B. Yes
正解：A
質問 # 40
You have created a Docker bridge network on a host with three containers attached, how do you make this containers accessible outside of the host?
- A. Use network connect to access the containers on the bridge network
- B. Use network attach to access the containers on the bridge network
- C. Use either EXPOSE or --publish to access the containers on the bridge network
- D. Use --link to access the containers on the bridge network
Correct
正解：C
質問 # 41
Is this the purpose of Docker Content Trust?
Solution. Indicate an image on Docker Hub is an official image.
- A. No
- B. Yes
正解：A
解説：
Explanation
Indicating an image on Docker Hub is an official image is not the purpose of Docker Content Trust. Official images are curated images that are provided and maintained by Docker, Inc. or by upstream software maintainers. Official images have a special badge on Docker Hub that indicates their status. Official images are not necessarily signed by Docker Content Trust, although some of them are. The purpose of Docker Content Trust is to sign and verify image tags, not to indicate official images. References:
https://docs.docker.com/docker-hub/official_images/, https://docs.docker.com/engine/security/trust/
質問 # 42
A company's security policy specifies that development and production containers must run on separate nodes in a given Swarm cluster.
Can this be used to schedule containers to meet the security policy requirements?
Solution: resource reservation
- A. No
- B. Yes
正解：A
質問 # 43
You want to create a container that is reachable from its host's network. Does this action accomplish this?
Solution: Use --link to access the container on the bridge network.
- A. No
- B. Yes
正解：A
質問 # 44
A users attempts to set the system time from inside a Docker container are unsuccessful. Could this be blocking this operation?
Solution: inter-process communication
- A. No
- B. Yes
正解：A
質問 # 45
Is this a type of Linux kernel namespace that provides container isolation?
Solution. Process ID
- A. Yes
- B. No
正解：A
解説：
Explanation
Process ID is a type of Linux kernel namespace that provides container isolation. Process ID (pid) namespace isolates the process ID number space, which means that processes in different pid namespaces can have the same PID. This allows each container to have its own init process (PID 1), which is the first process to start in a container and the ancestor of all other processes in the container. Pid namespace also prevents processes in one container from seeing or signaling processes in another container or on the host system, unless they share the same pid namespace or have the CAP_SYS_PTRACE capability. References:
https://docs.docker.com/engine/reference/run/#pid-settings-pid,
https://en.wikipedia.org/wiki/Linux_namespaces#Process_ID_(pid)
質問 # 46
Seven managers are in a swarm cluster.
Is this how should they be distributed across three datacenters or availability zones?
Solution: 3-3-1
- A. No
- B. Yes
正解：A
解説：
Explanation
This is not how they should be distributed across three datacenters or availability zones, because having one manager in one datacenter or availability zone creates a single point of failure and reduces the fault tolerance of the swarm. According to the official documentation, managers should be distributed evenly across datacenters or availability zones to ensure that the swarm can survive the loss of any one datacenter or availability zone.
References: https://docs.docker.com/engine/swarm/admin_guide/#add-manager-nodes-for-fault-tolerance
質問 # 47
Does this command display all the pods in the cluster that are labeled as 'env: development'?
Solution: 'kubectl get pods --all-namespaces -label env=development'
- A. No
- B. Yes
正解：A
質問 # 48
Which networking drivers allow you to enable multi-host network connectivity between containers?
- A. bridge, macvlan, ipvlan, overlay
- B. macvlan, ipvlan, and overlay
- C. bridge, user-defined, host
- D. host, macvlan, overlay, user-defined
正解：B
質問 # 49
Your organization has a centralized logging solution, such as Splunk.
Will this configure a Docker container to export container logs to the logging solution?
Solution: docker system events --filter splunk
- A. No
- B. Yes
正解：A
解説：
Explanation
Using docker system events --filter splunk does not configure a Docker container to export container logs to the logging solution. The docker system events command shows real-time events from the server, such as container creation, image deletion, network connection, etc. It does not show or export container logs to any external service. The --filter option allows filtering events by type, action, image, container, etc., but it does not accept splunk as a valid filter value. References:
https://docs.docker.com/engine/reference/commandline/system_events/,
https://docs.docker.com/config/containers/logging/
質問 # 50
What is the recommended way to configure the daemon flags and environment variables for your Docker daemon in a platform independent way?
- A. Set the configuration options using the ENV variable
- B. Set the configuration DOCKER_OPTS in '/etc/default/docker'
- C. Set the configuration options in '/etc/docker/daemon.json'
- D. Using 'docker config' to set the configuration options.
正解：C
質問 # 51
Will this command ensure that overlay traffic between service tasks is encrypted?
Solution: docker service create --network --encrypted
- A. No
- B. Yes
正解：A
質問 # 52
Two development teams in your organization use Kubernetes and want to deploy their applications while ensuring that Kubernetes-specific resources, such as secrets, are grouped together for each application.
Is this a way to accomplish this?
Solution: Add all the resources to the default namespace.
- A. No
- B. Yes
正解：A
質問 # 53
Which of the following commands starts a Redis container and configures it to always restart unless it is
explicitly stopped or Docker is restarted?
- A. 'docker run -d --restart omit-stopped redis'
- B. 'docker run -d --restart-policy unless-stopped redis'
- C. 'docker run -d --failure omit-stopped redis'
- D. 'docker run -d --restart unless-stopped redis'
正解：D
質問 # 54
A docker service 'web' is running with a scale factor of 1 (replicas = 1).
Bob intends to use the command 'docker service update --replicas=3 web'.
Alice intends to use the command 'docker service scale web=3'.
How do the outcomes oft these two commands differ?
- A. Bob's command updates the number of replicas of the 'web' service to 3. Alice's command results in an error.
- B. Bob's command only updates the service definition, but no new replicas are started. Alice's command
results in the actual scaling up of the 'web' service. - C. Bob's command results in an error. Alice's command updates the number of replicas of the 'web' service to 3.
- D. Both Bob's and Alice's commands result in exactly the same outcome, which is 3 instances of the 'web' service.
正解：D
質問 # 55
Will this configuration achieve fault tolerance for managers in a swarm?
Solution: an odd number of manager nodes, totaling more than two
- A. Yes
- B. No
正解：A
質問 # 56
A users attempts to set the system time from inside a Docker container are unsuccessful. Could this be blocking this operation?
Solution: inter-process communication
- A. No
- B. Yes
正解：A
解説：
Explanation
Inter-process communication is not blocking this operation. Inter-process communication (IPC) is a mechanism that allows processes to communicate and synchronize their actions. IPC creates a set of interfaces for exchanging various types of data. Docker supports IPC namespaces to isolate IPC resources between processes in different containers. However, IPC does not affect the ability to set the system time from inside a Docker container. References: https://docs.docker.com/engine/reference/run/#ipc-settings-ipc,
https://man7.org/linux/man-pages/man7/ipc.7.html
質問 # 57
Is this a type of Linux kernel namespace that provides container isolation?
Solution: Storage
- A. No
- B. Yes
正解：A
質問 # 58
A persistentVolumeClaim (PVC) is created with the specification storageClass: "", and size requirements that cannot be satisfied by any existing persistentVolume.
Is this an action Kubernetes takes in this situation?
Solution: The PVC remains unbound until a persistentVolume that matches all requirements of the PVC becomes available.
- A. Yes
- B. No
正解：A
解説：
Explanation
The PVC remains unbound until a persistentVolume that matches all requirements of the PVC becomes available is an action Kubernetes takes in this situation. A persistentVolumeClaim (PVC) is a request for storage by a user. A PVC specifies the desired size, access modes, and storage class of the storage. A persistentVolume (PV) is a piece of storage in the cluster that has been provisioned by an administrator. A PV has a lifecycle independent of any individual pod that uses it. A PVC is automatically bound to a suitable PV based on its requirements. If no PV exists that matches the PVC, and dynamic provisioning is not enabled, then the PVC remains unbound indefinitely until a matching PV is created. References:
https://kubernetes.io/docs/concepts/storage/persistent-volumes/,
https://kubernetes.io/docs/concepts/storage/persistent-volumes/#lifecycle-of-a-volume-and-claim
質問 # 59
The following health check exists in a Dockerfile:
'HEALTCHECK CMD curl --fail http://localhost/health || exit 1'
Which of the following describes its purpose?
- A. Defines the health check endpoint on the local host interface for containers to monitor the health of the docker engine.
- B. Defines the health check endpoint on the localhost interface for external monitoring tools to monitor the health of the docker engine.
- C. Defines the health check for the containerized application so that the application health can be monitored by the Docker engine
- D. Defines the action taken when container health fails, which in this case will kill the container with exit status 1
正解：D
質問 # 60
Does this command create a swarm service that only listens on port 53 using the UDP protocol?
Solution: 'docker service create -name dns-cache -p 53:53 -service udp dns-cache'
- A. No
- B. Yes
正解：A
質問 # 61
Is this the purpose of Docker Content Trust?
Solution: Enable mutual TLS between the Docker client and server.
- A. No
- B. Yes
正解：A
質問 # 62
Can this set of commands identify the published port(s) for a container?
Solution. 'docker container inspect", docker port'
- A. Yes
- B. No
正解：A
解説：
Explanation
This set of commands can identify the published port(s) for a container. The docker container inspect command shows low-level information about a container in JSON format. This information includes the network settings of the container, such as the port bindings and exposed ports. The docker port command shows the public port(s) that are mapped to a private port inside the container. By using these two commands, you can identify the published port(s) for a container. References:
https://docs.docker.com/engine/reference/commandline/container_inspect/,
https://docs.docker.com/engine/reference/commandline/port/
質問 # 63
Is this a type of Linux kernel namespace that provides container isolation?
Solution: Network
- A. No
- B. Yes
正解：A
質問 # 64
......
DCA認定試験は、さまざまなDockerエリアで個人の知識と実践的なスキルをテストする客観的なオンラインベースの試験です。この試験は、55の複数選択と複数の選択質問で構成されています。時間制限は90分で完了します。試験は挑戦的であるように設計されており、服用する前に重要な準備が必要です。候補者は、試験に合格し、DCA認定を獲得するために最低65％を獲得する必要があります。この認定は2年間有効であり、その後更新する必要があります。
100%合格保証付きの素晴らしいDCA試験問題PDF：https://www.goshiken.com/Docker/DCA-mondaishu.html
DCA問題集で2023年最新のDocker試験問題：https://drive.google.com/open?id=1km1qJgkqB8Y7TRMu--7t4hvE7DxyybWr