DCA Online Practice Questions and Answers

Correct Answer: C

Correct Answer: C

Correct Answer: C

Correct Answer: B

Storage is not a type of Linux kernel namespace that provides container isolation. Namespaces are a Linux kernel feature that provide isolation and virtualization of system resources for processes. They can be used to create isolated environments for containers that have their own view of system resources, such as process IDs, user IDs, network interfaces, etc. However, there is no storage namespace in Linux. The types of namespaces that exist are mount (mnt), process ID (pid), network (net), interprocess communication (ipc), user ID (user), control group (cgroup), time (time), and user namespace (uts).

Correct Answer: B

Deleting the image and deleting the image repository from Docker Trusted Registry (DTR) does not completely delete an image from disk in DTR. Deleting an image only removes its tag and association with a repository, but does not delete its underlying layers from disk. Deleting a repository only removes its metadata and tags, but does not delete its underlying layers from disk either. To completely delete an image from disk in DTR, you need to run a garbage collection job after deleting the image or the repository. A garbage collection job scans the DTR storage and removes any unused layers that are not referenced by any images or repositories.

Correct Answer: B

Using network attach to access the containers on the bridge network does not make the container reachable from its host's network. The network attach option connects a running container to another network, but it does not expose any ports to the host. To make a container reachable from its host's network, you need to use either EXPOSE or --publish to access the containers on the bridge network.

Correct Answer: A

This action will grant them read/write access to the engineering/api repository, because adding a user directly to the list of users with read/write access under the repository's Permissions tab is one way to grant permissions to a user in DTR. According to the official documentation, this is an example of using fine-grained permissions for a repository.

Correct Answer: A

Using network connect to access the container on the bridge network does create a container that is reachable from its host's network. The network connect command connects a running container to another network. By default, Docker creates and connects containers to a bridge network, which is an internal network that isolates containers from each other and from the host. However, you can use network connect to connect a container to another network, such as the host network, which allows the container to share the host's network stack and be reachable from the host's network.

Correct Answer: B

Using kubectl get deployment api does not display the events table for this object. The kubectl get command shows basic information about one or more resources, such as their name, age, status, etc. It does not show the events table, which is a list of events that occurred on the resource, such as creation, update, scaling, etc. To see the events table for this object, you need to use kubectl describe deployment api.

Correct Answer: B

Better logical separation of Dockerfile instructions for increased readability is not an advantage of multi-stage builds. Multi-stage builds are a feature that allows you to use multiple FROM statements in your Dockerfile. Each FROM statement begins a new stage of the build. You can selectively copy artifacts from one stage to another, leaving behind everything you don't want in the final image. The main advantage of multi-stage builds is that they allow you to reduce the size of your final image by only including the essential components and dependencies. Another advantage of multi-stage builds is that they allow you to optimize the build cache by grouping similar instructions in each stage. Better logical separation of Dockerfile instructions for increased readability is not an inherent advantage of multi-stage builds, as it depends on how you write and organize your Dockerfile.