Docker DCA Practice Test - Questions Answers, Page 13

A company's security policy specifies that development and production containers must run on separate nodes in a given Swarm cluster. Can this be used to schedule containers to meet the security policy requirements?

Solution. label constraints

A company's security policy specifies that development and production containers must run on separate nodes in a given Swarm cluster. Can this be used to schedule containers to meet the security policy requirements?

Solution. environment variables

Will a DTR security scan detect this?

Solution. private keys copied to the image

Will a DTR security scan detect this?

Solution. image configuration poor practices, such as exposed ports or inclusion of compilers in production images

You configure a local Docker engine to enforce content trust by setting the environment variable DOCKER_C0NTENT_TRUST=l. If myorg/myimage: 1.0 is unsigned, does Docker block this command?

Solution. docker image build, from a Dockeflle that begins FROM myorg/myimage: l1.0

Can this set of commands identify the published port(s) for a container?

Solution. 'docker container inspect', docker port'

Can this set of commands identify the published port(s) for a container?

Solution. 'docker port inspect', docker container inspect'

You want to create a container that is reachable from its host's network.

Does this action accomplish this?

Solution. Use either EXPOSE or -publish to access the container on the bridge network.

Your organization has a centralized logging solution, such as Sptunk.

Will this configure a Docker container to export container logs to the logging solution?

Solution. docker system events- -filter splunk