Free Access Docker.DCA.v2024-05-27.q181 Practice Test (Page 34)

Question 161

Is this a Linux kernel namespace that is disabled by default and must be enabled at Docker engine runtime to be used?
Solution: user

A.No

B.Yes

Question 162

Following the principle of least privilege, which of the following methods can be used to securely grnt access to the specific user to communicate to a Docker engine? (Choose two.)

A.Add the user to the 'docker' group on the server or specify the groue with the '--group' Docker daemon option.

B.Utilize openssl to create TLS client and server certificates, configuring the Docker engine to use with mutual TLS over TCP.

C.Give the user root access to the server to allow them to run Docker commands as root.

D.Utilize the '--host 127.0.0.1:2375' option to the Docker daemon to listen on port 2375 over TCP on localhost

E.Utilize the '--host 0.0.0.0:2375' option to the Docker daemon to listen on port 2375 over TCP on all interfaces

Question 163

Is this statement correct?
Solution: A Dockerfile stores the Docker daemon's configuration options.

A.Yes

B.No

Question 164

Which of the following namespaces is disabled by default and must be enabled at Docker engine runtime in order to be used?

A.user

B.mnt

C.pid

D.net

Question 165

A company's security policy specifies that development and production containers must run on separate nodes in a given Swarm cluster.
Can this be used to schedule containers to meet the security policy requirements?
Solution: node taints