ExamGecko
Search Search Login
Home Home / Docker / DCA
Question list
Search
Search

List of questions

Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Does this command create a swarm service that only listens on port 53 using the UDP protocol? Solution. 'docker service create -name dns-cache -p 53:53 -constraint networking.protocol.udp=true dns-cache'
Will this command display a list of volumes for a specific container? Solution. 'docker container logs nginx --volumes'
Is this a way to configure the Docker engine to use a registry without a trusted TLS certificate? Solution. Set INSECURE_REGISTRY in the' /etc/docker/default' configuration file.
The Kubernetes yaml shown below describes a clusterIP service. Is this a correct statement about how this service routes requests? Solution: Traffic sent to the IP of this service on port 8080 will be routed to port 80 in a random pod with the label aPP: nginx.
The Kubernetes yaml shown below describes a networkPolicy. Will the networkPolicy BLOCK this traffic? Solution: a request issued from a pod lacking the tier: api label, to a pod bearing the tier: backend label
A Kubernetes node is allocated a /26 CIDR block (64 unique IPs) for its address space. If every pod on this node has exactly two containers in it, how many pods can this address space support on this node?
Will this command list all nodes in a swarm cluster from the command line? Solution. 'docker inspect nodes
Is this a supported user authentication method for Universal Control Plane? Solution. x.500
Will this command display a list of volumes for a specific container? Solution: docker volume inspect nginx'
Are these conditions sufficient for Kubernetes to dynamically provision a persistentVolume, assuming there are no limitations on the amount and type of available external storage? Solution: A persistentVolumeClaim is created that specifies a pre-defined provisioner.

Question 23 - DCA discussion

Report
Export

The Kubernetes yaml shown below describes a networkPolicy.

Will the networkPolicy BLOCK this traffic?

Solution: a request issued from a pod lacking the tier: api label, to a pod bearing the tier: backend label

A.

Yes

Answers
A.

Yes

B.

No

Answers
B.

No

Suggested answer: A

Explanation:

The networkPolicy shown in the image is designed to block traffic from pods lacking the tier: api label, to pods bearing the tier: backend label. This is because the policy is set to matchLabels: tier: backend, and the ingress is set to - from: podSelector: matchLabels: tier: api. Therefore, any traffic that does not match these labels will be blocked.

Isolate containers with a user namespace | Docker Docs

The mnt namespace - Docker Cookbook - Second Edition

Container security fundamentals part 2: Isolation & namespaces

I hope this helps you understand the concept of networkPolicy and how it works with Kubernetes. If you have any other questions related to Docker, please feel free to ask me.

Show Answer
asked 08/11/2024
Nezha El Fakraoui
32 questions
PreviousPreviousNextNext
User
Your answer:
0 comments
Sorted by

Leave a comment first

ExamGecko

Copyright @2023 ExamGecko | All right reserved

Mail us: [email protected]
About us
Contact us
Twitter X
Facebook
Medium
Convert VPLUS to PDF
Open VPLUS files Easily and Quickly
Privacy Policy
Disclaimer
Terms