無料2023年最新のDCA問題集で100%合格保証には最新の サンプル
準備DCA問題解答無料更新には100%試験合格保証 [2023]
DCA試験は、候補者がDockerの概念と実践を強く理解する必要がある厳格で挑戦的な試験です。試験は、90分以内に完了する必要がある55の複数選択の質問で構成されています。候補者は、認定を獲得するために65％以上の合格スコアを達成する必要があります。試験はテストセンターでオンラインまたは対面で撮影することができ、候補者は試験を受けるために登録して料金を支払う必要があります。
Docker Certified Associate（DCA）認定試験は、Dockerでの仕事の経験がある個人の専門的な認定です。この認定は、Dockerの概念と実践の知識と理解、およびDockerを使用して実際の問題を解決する能力をテストするように設計されています。この認定は、Dockerプラットフォームを作成および維持している会社であるDocker、Inc。によって提供されています。
質問 # 63
Will this command ensure that overlay traffic between service tasks is encrypted?
Solution: docker service create --network --secure
- A. Yes
- B. No
正解：B
解説：
Explanation
This command will not ensure that overlay traffic between service tasks is encrypted, because it uses an invalid option for enabling encryption and an incomplete option for specifying the network. According to the official documentation, there is no such option as --secure for the docker service create command. The correct option to use is --network <network-name> where <network-name> is an existing overlay network that was created with encryption enabled.
References: https://docs.docker.com/network/drivers/overlay/#encryption
https://docs.docker.com/engine/reference/commandline/service_create/
質問 # 64
What is the recommended way to configure the daemon flags and environment variables for your Docker daemon in a platform independent way?
- A. Set the configuration options using the ENV variable
- B. Set the configuration options in '/etc/docker/daemon.json'
- C. Using 'docker config' to set the configuration options.
- D. Set the configuration DOCKER_OPTS in '/etc/default/docker'
正解：B
質問 # 65
Is this statement correct?
Solution: A Dockerfile provides instructions for building a Docker image
- A. Yes
- B. No
正解：B
質問 # 66
During development of an application meant to be orchestrated by Kubemetes, you want to mount the /data directory on your laptop into a container.
Will this strategy successfully accomplish this?
Solution. Create a Persistent VolumeClaim requesting storageClass:"" (which defaults to local storage) and hostPath and use this to populate a volume in a pod.
- A. No
- B. Yes
正解：B
解説：
Explanation
This strategy does successfully mount the /data directory on your laptop into a container. Creating a persistentVolumeClaim requesting storageClass:"" (which defaults to local storage) and hostPath and using this to populate a volume in a pod is a valid way to mount a host directory into a container in Kubernetes. A persistentVolumeClaim is a request for storage by a user or an application. A persistentVolume is an abstraction that represents a piece of storage in the cluster. A storageClass is a type of storage with a specific provisioner and parameters. A hostPath volume allows you to mount a file or directory from the host node's filesystem into your pod. A local volume allows you to mount local storage devices such as disks or partitions into your pod. By creating a persistentVolumeClaim with storageClass:"" and hostPath, you are requesting a piece of storage that is backed by a hostPath volume on the node where the pod is scheduled. By using this persistentVolumeClaim to populate a volume in a pod, you are mounting the host directory into the container in the pod. References: https://kubernetes.io/docs/concepts/storage/persistent-volumes/,
https://kubernetes.io/docs/concepts/storage/storage-classes/,
https://kubernetes.io/docs/concepts/storage/volumes/#hostpath,
https://kubernetes.io/docs/concepts/storage/volumes/#local
質問 # 67
Will this action upgrade Docker Engine CE to Docker Engine EE?
Solution. Run docker engine activate.
- A. No
- B. Yes
正解：B
解説：
Explanation
Running docker engine activate does upgrade Docker Engine CE to Docker Engine EE. The docker engine activate command is a convenience script that automates the process of uninstalling Docker Engine CE and installing Docker Engine EE on supported platforms. It requires an activation token or license file that can be obtained from Docker Hub or Docker Store. References:
https://docs.docker.com/engine/install/centos/#upgrade-docker-after-using-the-convenience-script,
https://docs.docker.com/engine/install/ubuntu/#upgrade-docker-after-using-the-convenience-script,
https://docs.docker.com/engine/install/debian/#upgrade-docker-after-using-the-convenience-script
質問 # 68
Does this command create a swarm service that only listens on port 53 using the UDP protocol?
Solution: 'docker service create -name dns-cache -p 53:53 -service udp dns-cache'
- A. Yes
- B. No
正解：B
解説：
Explanation
This command does not create a swarm service that only listens on port 53 using the UDP protocol, because it has several syntax errors and missing options. According to the official documentation, the correct command should be:
docker service create --name dns-cache -p 53:53/udp --mode global dns-cache The errors and missing options are:
The --name flag is missing a dash (-).
The -p flag is missing the /udp suffix to specify the protocol.
The --service flag does not exist and should be replaced by --mode to specify the service mode.
The global option should follow the --mode flag to indicate that one task should run on each node.
References:
https://docs.docker.com/engine/reference/commandline/service_create/#publish-service-ports-externally-to-the-s
https://docs.docker.com/engine/reference/commandline/service_create/#specify-service-mode-mode
https://docs.docker.com/engine/reference/commandline/service_create/#options
質問 # 69
Will this sequence of steps completely delete an image from disk in the Docker Trusted Registry?
Solution: Delete the image and run garbage collection on the Docker Trusted Registry.
- A. Yes
- B. No
正解：B
質問 # 70
Will this configuration achieve fault tolerance for managers in a swarm?
Solution: only two managers, one active and one passive.
- A. Yes
- B. No
正解：B
解説：
Explanation
This configuration will not achieve fault tolerance for managers in a swarm, because having only two managers creates a risk of losing quorum if one manager fails or becomes unavailable. According to the official documentation, having two managers also does not provide any benefits over having one manager, since both managers must be available for any management operations.
References: https://docs.docker.com/engine/swarm/admin_guide/#add-manager-nodes-for-fault-tolerance
質問 # 71
You configure a local Docker engine to enforce content trust by setting the environment variable DOCKER_C0NTENT_TRUST=l. If myorg/myimage: 1.0 is unsigned, does Docker block this command?
Solution. docker image build, from a Dockeflle that begins FROM myorg/myimage: l1.0
- A. No
- B. Yes
正解：B
解説：
Explanation
Docker blocks this command if you configure a local Docker engine to enforce content trust by setting the environment variable DOCKER_CONTENT_TRUST=1 and if myorg/myimage:1.0 is unsigned. Content trust is a feature that allows you to use digital signatures to verify the integrity and publisher of specific image tags.
When you enable content trust, you can only pull, run, or build with trusted images. If an image tag is unsigned, Docker will block any command that attempts to use it. This includes docker image build, from a Dockerfile that begins FROM myorg/myimage:1.0, if myorg/myimage:1.0 is unsigned. References:
https://docs.docker.com/engine/security/trust/,
https://docs.docker.com/engine/reference/commandline/image_build/
質問 # 72
Will this action upgrade Docker Engine CE to Docker Engine EE?
Solution: Uninstall 'docker-ce' package before installing 'docker-ee' package.
- A. No
- B. Yes
正解：B
解説：
Explanation
Uninstalling 'docker-ce' package before installing 'docker-ee' package does upgrade Docker Engine CE to Docker Engine EE. Docker Engine CE is the free and open source edition of Docker Engine, while Docker Engine EE is the enterprise-ready edition that includes additional features and support. To upgrade from CE to EE, you need to uninstall the 'docker-ce' package and its dependencies, and then install the 'docker-ee' package from the Docker repository. References:
https://docs.docker.com/engine/install/centos/#upgrade-docker-after-using-the-convenience-script,
https://docs.docker.com/engine/install/centos/#install-using-the-repository
質問 # 73
Does this command display all the pods in the cluster that are labeled as 'env: development'?
Solution: 'kubectl get pods -I env=development'
- A. No
- B. Yes
正解：B
質問 # 74
Seven managers are in a swarm cluster.
Is this how should they be distributed across three datacenters or availability zones?
Solution: 5-1-1
- A. Yes
- B. No
正解：B
解説：
Explanation
This is not how they should be distributed across three datacenters or availability zones, because having one manager in two datacenters or availability zones creates a risk of losing quorum if those datacenters or availability zones become unavailable. According to the official documentation, managers should be distributed evenly across datacenters or availability zones to ensure that the swarm can survive the loss of any one datacenter or availability zone.
References: https://docs.docker.com/engine/swarm/admin_guide/#add-manager-nodes-for-fault-tolerance
質問 # 75
You created a new service named 'http' and discover it is not registering as healthy. Will this command enable you to view the list of historical tasks for this service?
Solution: 'docker service inspect http'
- A. No
- B. Yes
正解：B
質問 # 76
Does this command create a swarm service that only listens on port 53 using the UDP protocol?
Solution: 'docker service create -name dns-cache -p 53:53 -service udp dns-cache'
- A. Yes
- B. No
正解：B
質問 # 77
Does this command display all the pods in the cluster that are labeled as 'env: development'?
Solution: 'kubectl get pods --all-namespaces -label env=development'
- A. Yes
- B. No
正解：B
質問 # 78
In the context of a swarm mode cluster, does this describe a node?
Solution: a physical machine participating in the swarm
- A. Yes
- B. No
正解：B
質問 # 79
Will this command mount the host's '/data1 directory to the ubuntu container in read-only mode?
Solution. 'docker run -v /data:/mydata -mode readonly ubuntu'
- A. Yes
- B. No
正解：B
解説：
Explanation
This command does not mount the host's /data directory to the ubuntu container in read-only mode. The -v or
--volume flag mounts a host directory or a named volume to a container. The syntax for mounting a host directory is -v <host-path>:<container-path>[:<options>]. The options can be ro for read-only mode, rw for read-write mode, z or Z for SELinux labels, etc. In this command, -mode readonly is not a valid option and will cause an error. To mount the host's /data directory to the ubuntu container in read-only mode, you need to use -v /data:/mydata:ro instead. References: https://docs.docker.com/storage/bind-mounts/,
https://docs.docker.com/engine/reference/run/#volume-shared-filesystems
質問 # 80
Does this command create a swarm service that only listens on port 53 using the UDP protocol?
Solution: 'docker service create --name dns-cache -p 53:53/udp dns-cache'
- A. No
- B. Yes
正解：B
質問 # 81
You created a new service named 'http* and discover it is not registering as healthy. Will this command enable you to view the list of historical tasks for this service?
Solution. 'docker inspect http"
- A. Yes
- B. No
正解：B
解説：
Explanation
Using docker inspect http does not enable you to view the list of historical tasks for this service. The docker inspect command shows low-level information about one or more objects, such as containers, images, networks, etc. It does not show information about services or tasks. To view the list of historical tasks for this service, you need to use docker service ps http --no-trunc. References:
https://docs.docker.com/engine/reference/commandline/inspect/,
https://docs.docker.com/engine/reference/commandline/service_ps/
質問 # 82
Will a DTR security scan detect this?
Solution. private keys copied to the image
- A. Yes
- B. No
正解：B
解説：
Explanation
A DTR security scan does not detect private keys copied to the image. A DTR security scan is a feature that scans images for known vulnerabilities in the software packages or dependencies that are installed in the image. A DTR security scan does not check for private keys or other sensitive data that may be accidentally or intentionally copied to the image. To avoid copying private keys to the image, you should use Docker secrets or other secure mechanisms to manage your credentials. References:
https://docs.docker.com/ee/dtr/user/manage-images/scan-images-for-vulnerabilities/,
https://docs.docker.com/engine/swarm/secrets/
質問 # 83
Does this command display all the pods in the cluster that are labeled as 'env: development'?
Solution: 'kubectl get pods --all-namespaces -I env=development'
- A. No
- B. Yes
正解：B
質問 # 84
......
Docker Certified Associate (DCA) 試験は、Dockerコンテナを扱うスキルと知識を検証するための重要な認定試験です。この試験は、Dockerテクノロジーに関連する幅広いトピックをカバーしており、そのコンポーネントを理解することが必要です。適切な準備とトレーニングを行うことで、DCA試験に合格することは、IT業界でキャリアを進めるのに役立ちます。
リアル問題集Docker DCA試験問題 [更新されたのは2023年]：https://www.passtest.jp/Docker/DCA-shiken.html
無料DCA試験問題集合格させるお手軽に試験合格：https://drive.google.com/open?id=1Lprs6Tx2UDC7_dK2nA03n5mM1Hy_Ansf