Docker Certified Associate (DCA) Test Review Questions Set 9 – Security

March 2019
S	M	T	W	T	F	S
« Oct
	1	2
3	4	5	6	7	8	9
10	11	12	13	14	15	16
17	18	19	20	21	22	23
24	25	26	27	28	29	30
31

Mar 25, 2018 by Trijito Santoso in Certification

Docker Certified Associate Test Review Questions Set 9 - Security

Please wait while the activity loads.
If this activity does not load, try refreshing your browser. Also, this page requires javascript. Please visit using a browser with javascript enabled.

If loading fails, click here to try again

Start

Congratulations - you have completed Docker Certified Associate Test Review Questions Set 9 - Security. You scored %%SCORE%% out of %%TOTAL%%. Your performance has been rated as %%RATING%%

Your answers are highlighted below.

Question 1

What is the command that need to be executed to sign an image before pushing it to repository?

A	export SIGN_DOCKER_IMAGE=1
B	export TRUST_DOCKER_IMAGE=1
C	export TRUST_DOCKER_CONTENT=1
D	export DOCKER_CONTENT_TRUST=1

Question 1 Explanation:

Reference: https://docs.docker.com/datacenter/dtr/2.3/guides/user/manage-images/sign-images/

Question 2

What is a grant made up of in Docker's Role Based Access Controls (RBAC)? (select three)

A	Role
B	Resource collection
C	Certificate
D	Subject

Question 2 Explanation:

Reference: https://docs.docker.com/datacenter/ucp/2.2/guides/access-control/grant-permissions/

Question 3

Where is the option to integrate Docker Enterprise with LDAP?

A	Docker Trusted Registry
B	Docker Compose
C	Universal Control Plane
D	Docker Machine

Question 3 Explanation:

Reference: https://docs.docker.com/datacenter/ucp/2.2/guides/admin/configure/external-auth/

Question 4

Which of the followings are Docker Engine Security features? (select all that apply)

A	You can configure Docker’s trust features so that your users can push and pull trusted images
B	You can use certificate-based client-server authentication to verify a Docker daemon has the rights to access images on a registry
C	You can configure secure computing mode (Seccomp) policies to secure system calls in a container
D	You can protect the Docker daemon socket and ensure only trusted Docker client connections

Question 4 Explanation:

Reference: https://docs.docker.com/engine/security/

Question 5

Docker security scan can be started by all users including those with read-only access. True or false?

A	False
B	True

Question 6

Docker security scan result is available in both UCP and DTR. True or false?

A	False
B	True

Question 6 Explanation:

Reference: https://docs.docker.com/datacenter/dtr/2.3/guides/user/manage-images/scan-images-for-vulnerabilities/#the-docker-security-scan-process

Question 7

Where do you create Docker Role Based Access Controls (RBAC)?

A	Docker Machine
B	Docker Trusted Registry
C	Universal Control Plane
D	Docker Compose

Question 7 Explanation:

Reference: https://docs.docker.com/datacenter/ucp/2.2/guides/access-control/

Question 8

What are the two types of UCP client bundles?

A	Admin user certificate bundles and user certificate bundles
B	Docker UCP client bundles and DTR client bundles
C	Ops client bundles and dev client bundles
D	Docker CLI bundles and Docker web UI bundles

Question 8 Explanation:

Reference: https://docs.docker.com/datacenter/ucp/2.2/guides/user/access-ucp/cli-based-access/

Question 9

What is the difference between UCP workers and managers?

A	ucp-agent service automatically starts serving all UCP components in worker node, and only a proxy service in manager node
B	ucp-agent service automatically starts serving all UCP components in manager node, and only a proxy service in worker node

Question 9 Explanation:

Reference: https://docs.docker.com/datacenter/ucp/2.2/guides/architecture/#under-the-hood

Question 10

What are the steps needed to sign images in a way that UCP trusts them? (select three)

A	Initialize trust metadata for the repository
B	Configure Notary client
C	Approve image sign on UCP
D	Delegate signing to the keys in your UCP client bundle

Question 10 Explanation:

Reference: https://docs.docker.com/datacenter/dtr/2.3/guides/user/manage-images/sign-images/#sign-images-that-ucp-can-trust

Once you are finished, click the button below. Any items you have not completed will be marked incorrect. Get Results

There are 10 questions to complete.

←

List

→

Return

Shaded items are complete.

1	2	3	4	5
6	7	8	9	10
End

Return

NOTES: For other review question sets and resources, you may want to check Docker Certified Associate (DCA) Certification Test Resources page.

Tagged with: certification, docker, docker certified associate

Giving Positive Impact On People's Lives

Browse By

Calendar