NO.15 Will a DTR security scan detect this?
Solution.private keys copied to the image

NO.16 Does this command create a swarm service that only listens on port 53 using the UDP protocol?
Solution: ‘docker service create -name dns-cache -p 53:53 -service udp dns-cache’

NO.17 Is this the purpose of Docker Content Trust?
Solution. Indicate an image on Docker Hub is an official image.

NO.18 Is this an advantage of multi-stage builds?
Solution: faster image builds by allowing parallel execution of Docker builds

NO.19 Which of the following is true about overlay networks?

NO.20 Your organization has a centralized logging solution, such as Splunk.
Will this configure a Docker container to export container logs to the logging solution?
Solution.docker run — log driver=splunk for every container at run time

NO.21 Will this Linux kernel facility limit a Docker container’s access to host resources, such as CPU or memory?
Solution. capabilities

NO.22 Is this a supported user authentication method for Universal Control Plane?
Solution.SAML

NO.23 Is this a supported user authentication method for Universal Control Plane?
Solution.x.500

NO.24 You configure a local Docker engine to enforce content trust by setting the environment variable DOCKER_CONTENT_TRUST=1.
If myorg/myimage: 1.0 is unsigned, does Docker block this command?
Solution: docker image import <tarball> myorg/myimage:1.0

NO.25 A company’s security policy specifies that development and production containers must run on separate nodes in a given Swarm cluster. Can this be used to schedule containers to meet the security policy requirements?
Solution. environment variables

NO.26 Will this command display a list of volumes for a specific container?
Solution: ‘docker container inspect nginx’

NO.27 In Docker Trusted Registry, is this how a user can prevent an image, such as ‘nginx:latest’, from being overwritten by another user with push access to the repository?
Solution: Keep a backup copy of the image on another repository.

NO.28 What is the purpose of a client bundle in the Universal Control Plane?

NO.29 An application image runs in multiple environments, with each environment using different certificates and ports.
Is this a way to provision configuration to containers at runtime?
Solution: Provision a Docker config object for each environment.

NO.30 Will this command ensure that overlay traffic between service tasks is encrypted?
Solution: docker service create –network –encrypted

NO.31 You are troubleshooting a Kubernetes deployment called api, and want to see the events table for this object. Does this command display it?
Solution: kubectl logs deployment api

NO.32 You want to mount external storage to a particular filesystem path in a container in a Kubernetes pod.
What is the correct set of objects to use for this?

NO.33 Your organization has a centralized logging solution, such as Splunk.
Will this configure a Docker container to export container logs to the logging solution?
Solution: docker logs <container-id>

NO.34 Is this a Linux kernel namespace that is disabled by default and must be enabled at Docker engine runtime to be used?
Solution. pid

NO.35 You add a new user to the engineering organization in DTR.
Will this action grant them read/write access to the engineering/api repository?
Solution. Mirror the engineering/api repository to one of the user’s own private repositories.

NO.36 When using the Docker client to push an image to a registry, what environment variable is used to instruct the client to perform signing of the image?

NO.37 Is this statement correct?
Solution. A Dockerfile stores persistent data between deployments of a container