Docker Certified Associate (DCA) Test Review Questions Set 9 – Security

February 2020
S	M	T	W	T	F	S
« Oct
	1
2	3	4	5	6	7	8
9	10	11	12	13	14	15
16	17	18	19	20	21	22
23	24	25	26	27	28	29

Mar 25, 2018 by Trijito Santoso in Certification

Docker Certified Associate Test Review Questions Set 9 - Security

Please wait while the activity loads.
If this activity does not load, try refreshing your browser. Also, this page requires javascript. Please visit using a browser with javascript enabled.

If loading fails, click here to try again

Start

Congratulations - you have completed Docker Certified Associate Test Review Questions Set 9 - Security. You scored %%SCORE%% out of %%TOTAL%%. Your performance has been rated as %%RATING%%

Your answers are highlighted below.

Question 1

Which of the followings are Docker Engine Security features? (select all that apply)

A	You can configure secure computing mode (Seccomp) policies to secure system calls in a container
B	You can use certificate-based client-server authentication to verify a Docker daemon has the rights to access images on a registry
C	You can protect the Docker daemon socket and ensure only trusted Docker client connections
D	You can configure Docker’s trust features so that your users can push and pull trusted images

Question 1 Explanation:

Reference: https://docs.docker.com/engine/security/

Question 2

What is the difference between UCP workers and managers?

A	ucp-agent service automatically starts serving all UCP components in manager node, and only a proxy service in worker node
B	ucp-agent service automatically starts serving all UCP components in worker node, and only a proxy service in manager node

Question 2 Explanation:

Reference: https://docs.docker.com/datacenter/ucp/2.2/guides/architecture/#under-the-hood

Question 3

Where is the option to integrate Docker Enterprise with LDAP?

A	Docker Compose
B	Universal Control Plane
C	Docker Machine
D	Docker Trusted Registry

Question 3 Explanation:

Reference: https://docs.docker.com/datacenter/ucp/2.2/guides/admin/configure/external-auth/

Question 4

Docker security scan result is available in both UCP and DTR. True or false?

A	True
B	False

Question 4 Explanation:

Reference: https://docs.docker.com/datacenter/dtr/2.3/guides/user/manage-images/scan-images-for-vulnerabilities/#the-docker-security-scan-process

Question 5

What is the command that need to be executed to sign an image before pushing it to repository?

A	export TRUST_DOCKER_IMAGE=1
B	export DOCKER_CONTENT_TRUST=1
C	export SIGN_DOCKER_IMAGE=1
D	export TRUST_DOCKER_CONTENT=1

Question 5 Explanation:

Reference: https://docs.docker.com/datacenter/dtr/2.3/guides/user/manage-images/sign-images/

Question 6

What are the steps needed to sign images in a way that UCP trusts them? (select three)

A	Approve image sign on UCP
B	Delegate signing to the keys in your UCP client bundle
C	Configure Notary client
D	Initialize trust metadata for the repository

Question 6 Explanation:

Reference: https://docs.docker.com/datacenter/dtr/2.3/guides/user/manage-images/sign-images/#sign-images-that-ucp-can-trust

Question 7

Docker security scan can be started by all users including those with read-only access. True or false?

A	True
B	False

Question 8

Where do you create Docker Role Based Access Controls (RBAC)?

A	Universal Control Plane
B	Docker Trusted Registry
C	Docker Compose
D	Docker Machine

Question 8 Explanation:

Reference: https://docs.docker.com/datacenter/ucp/2.2/guides/access-control/

Question 9

What is a grant made up of in Docker's Role Based Access Controls (RBAC)? (select three)

A	Role
B	Certificate
C	Subject
D	Resource collection

Question 9 Explanation:

Reference: https://docs.docker.com/datacenter/ucp/2.2/guides/access-control/grant-permissions/

Question 10

What are the two types of UCP client bundles?

A	Docker UCP client bundles and DTR client bundles
B	Admin user certificate bundles and user certificate bundles
C	Ops client bundles and dev client bundles
D	Docker CLI bundles and Docker web UI bundles

Question 10 Explanation:

Reference: https://docs.docker.com/datacenter/ucp/2.2/guides/user/access-ucp/cli-based-access/

Once you are finished, click the button below. Any items you have not completed will be marked incorrect. Get Results

There are 10 questions to complete.

←

List

→

Return

Shaded items are complete.

1	2	3	4	5
6	7	8	9	10
End

Return

NOTES: For other review question sets and resources, you may want to check Docker Certified Associate (DCA) Certification Test Resources page.

Tagged with: certification, docker, docker certified associate

Giving Positive Impact On People's Lives

Browse By

Calendar