NO.61 You created a new service named ‘http’ and discover it is not registering as healthy. Will this command enable you to view the list of historical tasks for this service?
Solution: ‘docker service inspect http’

NO.62 A users attempts to set the system time from inside a Docker container are unsuccessful. Could this be blocking this operation?
Solution: Linux capabilities

NO.63 Will this Linux kernel facility limit a Docker container’s access to host resources, such as CPU or memory?
Solution: namespaces

NO.64 In Docker Trusted Registry, how would a user prevent an image, for example ‘nginx:latest’ from being overwritten by another user with push access to the repository?

NO.65 A company’s security policy specifies that development and production containers must run on separate nodes in a given Swarm cluster.
Can this be used to schedule containers to meet the security policy requirements?
Solution: resource reservation

NO.66 Which of the following is true about overlay networks?

NO.67 Can this set of commands identify the published port(s) for a container?
Solution: docker container inspect’, ‘docker port’

NO.68 Which of the following is true about overlay networks?

NO.69 A users attempts to set the system time from inside a Docker container are unsuccessful. Could this be blocking this operation?
Solution: Linux capabilities

NO.70 Is this a function of UCP?
Solution: enforces the deployment of signed images to the cluster

NO.71 When using the Docker client to push an image to a registry, what environment variable is used to instruct the client to perform signing of the image?

NO.72 You want to create a container that is reachable from its host’s network. Does this action accomplish this?
Solution: Use either EXPOSE or –publish to access the containers on the bridge network

NO.73 The Kubernetes yaml shown below describes a networkPolicy.

Will the networkPolicy BLOCK this trafftc?
Solution. a request issued from a pod bearing the tier: backend label, to a pod bearing the tier: frontend label

NO.74 Are these conditions sufficient for Kubernetes to dynamically provision a persistentVolume, assuming there are no limitations on the amount and type of available external storage?
Solution: A default provisioner is specified, and subsequently a persistentVolumeClaim is created.

NO.75 You want to create a container that is reachable from its host’s network. Does this action accomplish this?
Solution: Use network attach to access the containers on the bridge network

NO.76 A company’s security policy specifies that development and production containers must run on separate nodes in a given Swarm cluster.
Can this be used to schedule containers to meet the security policy requirements?
Solution: label contraints

NO.77 The output of which command can be used to find the architecture and operating system an image is compatible with?

NO.78 The following health check exists in a Dockerfile:
‘HEALTCHECK
CMD curl –fail http://localhost/health || exit 1′
Which of the following describes its purpose?

NO.79 You created a new service named ‘http’ and discover it is not registering as healthy. Will this command enable you to view the list of historical tasks for this service?
Solution: ‘docker inspect http’

NO.80 Are these conditions sufficient for Kubernetes to dynamically provision a persistentVolume, assuming there are no limitations on the amount and type of available external storage?
Solution: A default storageClass is specified, and subsequently a persistentVolumeClaim is created.

NO.81 The following Docker Compose file is deployed as a stack:

Is this statement correct about this health check definition?
Solution: Health checks test for app health ten seconds apart. If the test fails, the container will be restarted three times before it gets rescheduled.