ExamGecko
Search Search Login
Home Home / Docker / DCA
Question list
Search
Search

List of questions

Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

The Kubernetes yaml shown below describes a networkPolicy. Will the networkPolicy BLOCK this traffic? Solution: a request issued from a pod lacking the tier: api label, to a pod bearing the tier: backend label
Does this command create a swarm service that only listens on port 53 using the UDP protocol? Solution. 'docker service create -name dns-cache -p 53:53 -constraint networking.protocol.udp=true dns-cache'
Is this a supported user authentication method for Universal Control Plane? Solution. x.500
Will this command display a list of volumes for a specific container? Solution. 'docker container logs nginx --volumes'
Is this a way to configure the Docker engine to use a registry without a trusted TLS certificate? Solution. Set INSECURE_REGISTRY in the' /etc/docker/default' configuration file.
The Kubernetes yaml shown below describes a clusterIP service. Is this a correct statement about how this service routes requests? Solution: Traffic sent to the IP of this service on port 8080 will be routed to port 80 in a random pod with the label aPP: nginx.
A Kubernetes node is allocated a /26 CIDR block (64 unique IPs) for its address space. If every pod on this node has exactly two containers in it, how many pods can this address space support on this node?
Will this command list all nodes in a swarm cluster from the command line? Solution. 'docker inspect nodes
A user's attempts to set the system time from inside a Docker container are unsuccessful. Could this be blocking this operation? Solution. SELinux
Will this command display a list of volumes for a specific container? Solution: docker volume inspect nginx'

Question 126 - DCA discussion

Report
Export

You configure a local Docker engine to enforce content trust by setting the environment variable DOCKER_C0NTENT_TRUST=l. If myorg/myimage: 1.0 is unsigned, does Docker block this command?

Solution. docker image build, from a Dockeflle that begins FROM myorg/myimage: l1.0

A.

Yes

Answers
A.

Yes

B.

No

Answers
B.

No

Suggested answer: A

Explanation:

= Docker will block this command if you configure the local Docker engine to enforce content trust by setting the environment variable DOCKER_CONTENT_TRUST=1.This means that you can only pull, run, or build with trusted images that have been signed using Docker Content Trust (DCT)1.DCT is a feature that allows you to use digital signatures to verify the integrity and the publisher of specific image tags2. If myorg/myimage:1.0 is unsigned, it means that it does not have a valid signature from the image publisher or a trusted delegate. Therefore, Docker will not allow you to build an image from a Dockerfile that begins with FROM myorg/myimage:1.0, as it cannot verify the source or the content of the base image. You will get an error message like this:

No valid trust data for 1.0

To avoid this error, you need to either disable DCT by setting DOCKER_CONTENT_TRUST=0, or use a signed image tag as the base image in your Dockerfile3.Reference:

Content trust in Docker | Docker Docs

Docker Content Trust: What It Is and How It Secures Container Images

Automation with content trust | Docker Docs

Show Answer
asked 08/11/2024
Nisanka Mandara
30 questions
PreviousPreviousNextNext
User
Your answer:
0 comments
Sorted by

Leave a comment first

ExamGecko

Copyright @2023 ExamGecko | All right reserved

Mail us: [email protected]
About us
Contact us
Twitter X
Facebook
Medium
Convert VPLUS to PDF
Open VPLUS files Easily and Quickly
Privacy Policy
Disclaimer
Terms