ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 117 - DCA discussion

Report
Export

Will this command ensure that overlay traffic between service tasks is encrypted?

Solution. docker network create -d overlay --secure <network-name>

A.

Yes

Answers
A.

Yes

B.

No

Answers
B.

No

Suggested answer: B

Explanation:

= The commanddocker network create -d overlay --secure <network-name>will not ensure that overlay traffic between service tasks is encrypted.The--secureoption is not a valid flag for thedocker network createcommand1.To enable encryption for an overlay network, you need to use the--opt encryptedflag instead23.This will create IPSEC tunnels between the nodes where the service tasks are scheduled, using the AES algorithm in GCM mode2.You can verify if an overlay network is encrypted by checking if the IPSEC tunnels were created using tools likenetstat4.Reference:

1: docker network create | Docker Docs

2: Encrypt traffic on an overlay network | Docker Docs

3: Overlay network driver | Docker Docs

4: Docker: How to verify if an overlay network is encrypted - Stack Overflow

asked 08/11/2024
Matthew McConnell
41 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first