Docker Certified Associate (DCA) Test Review Questions Set 9 – Security

June 2020
S	M	T	W	T	F	S
« Oct
	1	2	3	4	5	6
7	8	9	10	11	12	13
14	15	16	17	18	19	20
21	22	23	24	25	26	27
28	29	30

Mar 25, 2018 by Trijito Santoso in Certification

Docker Certified Associate Test Review Questions Set 9 - Security

Please wait while the activity loads.
If this activity does not load, try refreshing your browser. Also, this page requires javascript. Please visit using a browser with javascript enabled.

If loading fails, click here to try again

Start

Congratulations - you have completed Docker Certified Associate Test Review Questions Set 9 - Security. You scored %%SCORE%% out of %%TOTAL%%. Your performance has been rated as %%RATING%%

Your answers are highlighted below.

Question 1

Docker security scan result is available in both UCP and DTR. True or false?

A	False
B	True

Question 1 Explanation:

Reference: https://docs.docker.com/datacenter/dtr/2.3/guides/user/manage-images/scan-images-for-vulnerabilities/#the-docker-security-scan-process

Question 2

Where do you create Docker Role Based Access Controls (RBAC)?

A	Docker Compose
B	Docker Trusted Registry
C	Universal Control Plane
D	Docker Machine

Question 2 Explanation:

Reference: https://docs.docker.com/datacenter/ucp/2.2/guides/access-control/

Question 3

Which of the followings are Docker Engine Security features? (select all that apply)

A	You can use certificate-based client-server authentication to verify a Docker daemon has the rights to access images on a registry
B	You can configure Docker’s trust features so that your users can push and pull trusted images
C	You can protect the Docker daemon socket and ensure only trusted Docker client connections
D	You can configure secure computing mode (Seccomp) policies to secure system calls in a container

Question 3 Explanation:

Reference: https://docs.docker.com/engine/security/

Question 4

What are the steps needed to sign images in a way that UCP trusts them? (select three)

A	Configure Notary client
B	Approve image sign on UCP
C	Initialize trust metadata for the repository
D	Delegate signing to the keys in your UCP client bundle

Question 4 Explanation:

Reference: https://docs.docker.com/datacenter/dtr/2.3/guides/user/manage-images/sign-images/#sign-images-that-ucp-can-trust

Question 5

What is the difference between UCP workers and managers?

A	ucp-agent service automatically starts serving all UCP components in manager node, and only a proxy service in worker node
B	ucp-agent service automatically starts serving all UCP components in worker node, and only a proxy service in manager node

Question 5 Explanation:

Reference: https://docs.docker.com/datacenter/ucp/2.2/guides/architecture/#under-the-hood

Question 6

Where is the option to integrate Docker Enterprise with LDAP?

A	Docker Trusted Registry
B	Docker Machine
C	Universal Control Plane
D	Docker Compose

Question 6 Explanation:

Reference: https://docs.docker.com/datacenter/ucp/2.2/guides/admin/configure/external-auth/

Question 7

What is a grant made up of in Docker's Role Based Access Controls (RBAC)? (select three)

A	Subject
B	Role
C	Certificate
D	Resource collection

Question 7 Explanation:

Reference: https://docs.docker.com/datacenter/ucp/2.2/guides/access-control/grant-permissions/

Question 8

What is the command that need to be executed to sign an image before pushing it to repository?

A	export DOCKER_CONTENT_TRUST=1
B	export TRUST_DOCKER_CONTENT=1
C	export TRUST_DOCKER_IMAGE=1
D	export SIGN_DOCKER_IMAGE=1

Question 8 Explanation:

Reference: https://docs.docker.com/datacenter/dtr/2.3/guides/user/manage-images/sign-images/

Question 9

What are the two types of UCP client bundles?

A	Docker UCP client bundles and DTR client bundles
B	Admin user certificate bundles and user certificate bundles
C	Ops client bundles and dev client bundles
D	Docker CLI bundles and Docker web UI bundles

Question 9 Explanation:

Reference: https://docs.docker.com/datacenter/ucp/2.2/guides/user/access-ucp/cli-based-access/

Question 10

Docker security scan can be started by all users including those with read-only access. True or false?

A	False
B	True

Once you are finished, click the button below. Any items you have not completed will be marked incorrect. Get Results

There are 10 questions to complete.

←

List

→

Return

Shaded items are complete.

1	2	3	4	5
6	7	8	9	10
End

Return

NOTES: For other review question sets and resources, you may want to check Docker Certified Associate (DCA) Certification Test Resources page.

Tagged with: certification, docker, docker certified associate

Giving Positive Impact On People's Lives

Browse By

Calendar