IT Certification Exam Questions & Answers

QUESTION 63
You are pulling images from a Docker Trusted Registry installation configured to use self-signed certificates, and this error appears:
‘x509: certificate signed by unknown authority’.
You already downloaded the Docker Trusted Registry certificate authority certificate from https://dtr.example.com/ca.
How do you trust it? (Select two.)

QUESTION 64
One of several containers in a pod is marked as unhealthy after failing its livenessProbe many times. Is this the action taken by the orchestrator to fix the unhealthy container?
Solution: The controller managing the pod is autoscaled back to delete the unhealthy pod and alleviate load.

QUESTION 65
A Kubernetes node is allocated a /26 CIDR block (64 unique IPs) for its address space.
If every pod on this node has exactly two containers in it, how many pods can this address space support on this node?

QUESTION 66
Can this set of commands identify the published port(s) for a container?
Solution: docker container inspect’, ‘docker port’

QUESTION 67
The Kubernetes yaml shown below describes a networkPolicy.

Will the networkPolicy BLOCK this traffic?
Solution: a request issued from a pod lacking the tier: api label, to a pod bearing the tier: backend label

QUESTION 68
In the context of a swarm mode cluster, does this describe a node?
Solution: a virtual machine participating in the swarm

QUESTION 69
Will a DTR security scan detect this?
Solution: licenses for known third party binary components

QUESTION 70
A host machine has four CPUs available and two running containers. The sysadmin would like to assign two CPUs to each container.
Which of the following commands achieves this?

QUESTION 71
Will this sequence of steps completely delete an image from disk in the Docker Trusted Registry?
Solution: Delete the image and delete the image repository from Docker Trusted Registry

QUESTION 72
Will this sequence of steps completely delete an image from disk in the Docker Trusted Registry?
Solution: Delete the image and run garbage collection on the Docker Trusted Registry.

QUESTION 73
The following Docker Compose file is deployed as a stack:

Is this statement correct about this health check definition?
Solution: Health checks test for app health ten seconds apart. If the test fails, the container will be restarted three times before it gets rescheduled.

QUESTION 74
How do you change the default logging driver for the docker daemon in Linux?

QUESTION 75
You want to provide a configuration file to a container at runtime. Does this set of Kubernetes tools and steps accomplish this?
Solution: Turn the configuration file into a configMap object and mount it directly into the appropriate pod and container using the .spec.containers.configMounts key.

QUESTION 76
The output of which command can be used to find the architecture and operating system an image is compatible with?

QUESTION 77
One of several containers in a pod is marked as unhealthy after failing its livenessProbe many times. Is this the action taken by the orchestrator to fix the unhealthy container?
Solution: Kubernetes automatically triggers a user-defined script to attempt to fix the unhealthy container.

QUESTION 78
Is this a type of Linux kernel namespace that provides container isolation?
Solution: Network

QUESTION 79
The Kubernetes yaml shown below describes a clusterIP service.

Is this a correct statement about how this service routes requests?
Solution: Traffic sent to the IP of any pod with the label app: nginx on port 8080 will be forwarded to port 80 in that pod.

QUESTION 80
Which of the following are types of namespaces used by Docker to provide isolation? (Choose 2.)

QUESTION 81
During development of an application meant to be orchestrated by Kubernetes, you want to mount the /data directory on your laptop into a container.
Will this strategy successfully accomplish this?
Solution: Create a PersistentVolume with storageciass: “” and hostPath: /data, and a persistentVolumeClaim requesting this PV. Then use that PVC to populate a volume in a pod

QUESTION 82
Which of the following statements is true about secrets?

QUESTION 83
Is this a Linux kernel namespace that is disabled by default and must be enabled at Docker engine runtime to be used?
Solution: net

QUESTION 84
Which statement is true?