Docker Certified Associate (DCA) Test Review Questions Set 9 – Security

April 2018
S	M	T	W	T	F	S
« Mar
1	2	3	4	5	6	7
8	9	10	11	12	13	14
15	16	17	18	19	20	21
22	23	24	25	26	27	28
29	30

Mar 25, 2018 by Trijito Santoso in Certification

Docker Certified Associate Test Review Questions Set 9 - Security

Please wait while the activity loads.
If this activity does not load, try refreshing your browser. Also, this page requires javascript. Please visit using a browser with javascript enabled.

If loading fails, click here to try again

Start

Congratulations - you have completed Docker Certified Associate Test Review Questions Set 9 - Security. You scored %%SCORE%% out of %%TOTAL%%. Your performance has been rated as %%RATING%%

Your answers are highlighted below.

Question 1

What are the steps needed to sign images in a way that UCP trusts them? (select three)

A	Configure Notary client
B	Delegate signing to the keys in your UCP client bundle
C	Initialize trust metadata for the repository
D	Approve image sign on UCP

Question 1 Explanation:

Reference: https://docs.docker.com/datacenter/dtr/2.3/guides/user/manage-images/sign-images/#sign-images-that-ucp-can-trust

Question 2

What is the command that need to be executed to sign an image before pushing it to repository?

A	export TRUST_DOCKER_CONTENT=1
B	export TRUST_DOCKER_IMAGE=1
C	export DOCKER_CONTENT_TRUST=1
D	export SIGN_DOCKER_IMAGE=1

Question 2 Explanation:

Reference: https://docs.docker.com/datacenter/dtr/2.3/guides/user/manage-images/sign-images/

Question 3

Which of the followings are Docker Engine Security features? (select all that apply)

A	You can protect the Docker daemon socket and ensure only trusted Docker client connections
B	You can use certificate-based client-server authentication to verify a Docker daemon has the rights to access images on a registry
C	You can configure secure computing mode (Seccomp) policies to secure system calls in a container
D	You can configure Docker’s trust features so that your users can push and pull trusted images

Question 3 Explanation:

Reference: https://docs.docker.com/engine/security/

Question 4

What are the two types of UCP client bundles?

A	Ops client bundles and dev client bundles
B	Docker CLI bundles and Docker web UI bundles
C	Admin user certificate bundles and user certificate bundles
D	Docker UCP client bundles and DTR client bundles

Question 4 Explanation:

Reference: https://docs.docker.com/datacenter/ucp/2.2/guides/user/access-ucp/cli-based-access/

Question 5

Where do you create Docker Role Based Access Controls (RBAC)?

A	Universal Control Plane
B	Docker Trusted Registry
C	Docker Machine
D	Docker Compose

Question 5 Explanation:

Reference: https://docs.docker.com/datacenter/ucp/2.2/guides/access-control/

Question 6

What is the difference between UCP workers and managers?

A	ucp-agent service automatically starts serving all UCP components in worker node, and only a proxy service in manager node
B	ucp-agent service automatically starts serving all UCP components in manager node, and only a proxy service in worker node

Question 6 Explanation:

Reference: https://docs.docker.com/datacenter/ucp/2.2/guides/architecture/#under-the-hood

Question 7

Where is the option to integrate Docker Enterprise with LDAP?

A	Universal Control Plane
B	Docker Trusted Registry
C	Docker Machine
D	Docker Compose

Question 7 Explanation:

Reference: https://docs.docker.com/datacenter/ucp/2.2/guides/admin/configure/external-auth/

Question 8

Docker security scan can be started by all users including those with read-only access. True or false?

A	False
B	True

Question 9

What is a grant made up of in Docker's Role Based Access Controls (RBAC)? (select three)

A	Certificate
B	Resource collection
C	Subject
D	Role

Question 9 Explanation:

Reference: https://docs.docker.com/datacenter/ucp/2.2/guides/access-control/grant-permissions/

Question 10

Docker security scan result is available in both UCP and DTR. True or false?

A	True
B	False

Question 10 Explanation:

Reference: https://docs.docker.com/datacenter/dtr/2.3/guides/user/manage-images/scan-images-for-vulnerabilities/#the-docker-security-scan-process

Once you are finished, click the button below. Any items you have not completed will be marked incorrect. Get Results

There are 10 questions to complete.

←

List

→

Return

Shaded items are complete.

1	2	3	4	5
6	7	8	9	10
End

Return

NOTES: For other review question sets and resources, you may want to check Docker Certified Associate (DCA) Certification Test Resources page.

Tagged with: certification, docker, docker certified associate

Giving Positive Impact On People's Lives

Browse By

Calendar