NO.98 You set up an automatic pruning policy on a DTR repository to prune all images using Apache licenses. What effect does this have on images in this repository?

NO.99 You have deployed a service to swarm. Which command uses the Docker CLI to set the number of tasks of the services to 5? (choose 2)

NO.100 The following health check exists in a Dockerfile:
‘HEALTCHECK CMD curl –fail http://localhost/health || exit 1’
Which of the following describes its purpose?

NO.101 A persistentVolumeClaim (PVC) is created with the specification storageClass: “”, and size requirements that cannot be satisfied by any existing persistentVolume.
Is this an action Kubernetes takes in this situation?
Solution: The PVC remains unbound until a persistentVolume that matches all requirements of the PVC becomes available.

NO.102 Which of the following are types of namespaces used by Docker to provide isolation? (Choose 2.)

NO.103 Which ‘docker run’ flag lifts cgroup limitations?

NO.104 Will this command list all nodes in a swarm cluster from the command line?
Solution: ‘docker swarm nodes’

NO.105 Is this a type of Linux kernel namespace that provides container isolation?
Solution: Authentication

NO.106 You configure a local Docker engine to enforce content trust by setting the environment variable
DOCKER_CONTENT_TRUST=1.
If myorg/myimage: 1.0 is unsigned, does Docker block this command?
Solution: docker service create myorg/myimage:1.0

NO.107 The Kubernetes yaml shown below describes a clusterIP service.

Is this a correct statement about how this service routes requests?
Solution: Traffic sent to the IP of any pod with the label app: nginx on port 8080 will be forwarded to port 80 in that pod.

NO.108 Does this command display all the pods in the cluster that are labeled as ‘env: development’?
Solution: ‘kubectl get pods –all-namespaces -I env=development’

NO.109 Does this command display all the pods in the cluster that are labeled as ‘env: development’?
Solution: ‘kubectl get pods –all-namespaces -label env=development’

NO.110 Two development teams in your organization use Kubernetes and want to deploy their applications while ensuring that Kubernetes-specific resources, such as secrets, are grouped together for each application.
Is this a way to accomplish this?
Solution: Create one namespace for each application and add all the resources to it.

NO.111 Will this action upgrade Docker Engine CE to Docker Engine EE?
Solution: Manually download the ‘docker-ee’ package

NO.112 What is used by the kernel to Isolate resources when running Docker containers?

NO.113 A user is having problems running Docker. Which of the following will start Docker in debug mode?

NO.114 Wha is the purpose of Docker Content Trust?

NO.115 A server is running low on disk space. What command can be used to check the disk usage of images,
containers, and volumes for Docker engine?

NO.116 You created a new service named ‘http’ and discover it is not registering as healthy. Will this command enable you to view the list of historical tasks for this service?
Solution: ‘docker inspect http’

NO.117 Which of the following is supported by control groups?

NO.118 Is this the purpose of Docker Content Trust?
Solution: Enable mutual TLS between the Docker client and server.

NO.119 Two development teams in your organization use Kubernetes and want to deploy their applications while ensuring that Kubernetes-specific resources, such as secrets, are grouped together for each application.
Is this a way to accomplish this?
Solution: Add all the resources to the default namespace.

NO.120 Is this a function of UCP?
Solution: scans images to detect any security vulnerability