Mirantis Mirantis Certifications DCA Questions & Answers

• Question 1:

  When seven managers are in a swarm cluster how would they be distributed across three datacenters or availability zones?

  A. 5-1-1

  B. 3-2-2

  C. 3-3-1

  D. 4-2-1

  Correct Answer: B

• Question 2:

  One of several containers in a pod is marked as unhealthy after failing its livenessProbe many times. Is this the action taken by the orchestrator to fix the unhealthy container? Solution: Kubernetes automatically triggers a user-defined script to attempt to fix the unhealthy container.

  A. Yes

  B. No

  Correct Answer: B

  Kubernetes does not automatically trigger a user-defined script to attempt to fix the unhealthy container, because Kubernetes does not have such a feature. According to the official documentation, Kubernetes only supports three types of probes: exec, httpGet, and tcpSocket, and none of them can execute arbitrary scripts.

• Question 3:

  You want to provide a configuration file to a container at runtime. Does this set of Kubernetes tools and steps accomplish this? Solution: Mount the configuration file directly into the appropriate pod and container using the .spec.containers.configMounts key.

  A. Yes

  B. No

  Correct Answer: B

  This set of Kubernetes tools and steps does not accomplish this, because there is no such key as .spec.containers.configMounts in the pod specification. According to the official documentation, the correct key to use for mounting a configuration file directly into a container is .spec.containers.volumeMounts, which requires a corresponding volume definition in .spec.volumes. References: https://kubernetes.io/docs/tasks/configure-pod-container/configure-pod- configmap/ #add-configmap-data-to-a-volume https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.22/#container-v1-core

• Question 4:

  Your organization has a centralized logging solution, such as Splunk.

  Will this configure a Docker container to export container logs to the logging solution?

  Solution. Set the log-driver-and log-opt keys to values for the logging solution (Splunk) in the daemon.json file.

  A. Yes

  B. No

  Correct Answer: A

  Setting the log-driver and log-opt keys to values for the logging solution (Splunk) in the daemon.json file does configure a Docker container to export container logs to the logging solution. The daemon.json file is a configuration file for the Docker daemon that allows you to specify various options, such as the default logging driver and logging options. The log-driver key sets the default logging driver for all containers, unless overridden by the --log-driver option when creating or running a container. The log-opt key sets the default logging options for all containers, unless overridden by the --log-opt option when creating or running a container. To use Splunk as the default logging driver, you can set the log-driver key to splunk and provide the Splunk URL, token, and other options using the log-opt key.

• Question 5:

  Which statement is correct about cluster management in Docker Enterprise Edition 3.x?

  A. Clusters can contain Windows 10 and Windows Server 2016 only.

  B. Clusters can contain Linux, Windows Server 2016 and 2019, and Linux on IBM z Systems.

  C. Clusters can contain Linux only.

  D. Clusters can contain Linux and Windows Server 2008 R2 only.

  Correct Answer: A

• Question 6:

  Are these conditions sufficient for Kubernetes to dynamically provision a persistentVolume, assuming there are no limitations on the amount and type of available external storage? Solution: A default storageClass is specified, and subsequently a persistentVolumeClaim is created.

  A. Yes

  B. No

  Correct Answer: A

  These conditions are sufficient for Kubernetes to dynamically provision a persistentVolume, because a default storageClass provides the information needed to create a persistentVolume that matches the persistentVolumeClaim. According to the official documentation, if no storageClass is specified or requested, then the default one is used.

• Question 7:

  Will a DTR security scan detect this?

  Solution: licenses for known third party binary components

  A. Yes

  B. No

  Correct Answer: B

• Question 8:

  You want to provide a configuration file to a container at runtime. Does this set of Kubernetes tools and steps accomplish this?

  Solution: Turn the configuration file into a configMap object, use it to populate a volume associated with the pod, and mount that file from the volume to the appropriate container and path.

  A. Yes

  B. No

  Correct Answer: A

  This set of Kubernetes tools and steps accomplishes this, because it follows the recommended way of providing a configuration file to a container at runtime using a configMap object. According to the official documentation, this method allows you to decouple configuration artifacts from image content and update them without restarting containers.

• Question 9:

  In Docker Trusted Registry, is this how a user can prevent an image, such as 'nginx:latest', from being overwritten by another user with push access to the repository? Solution: Use the DTR web Ul to make all tags in the repository immutable.

  A. Yes

  B. No

  Correct Answer: B

  This is not how a user can prevent an image from being overwritten by another user with push access to the repository, because making all tags in the repository immutable will also prevent the user from updating their own image tags. According to the official documentation, a better way to prevent an image from being overwritten is to use promotion policies that only allow certain users or teams to push images with specific tags.

• Question 10:

  Does this command display all the pods in the cluster that are labeled as 'env: development'? Solution: 'kubectl get pods -I env=development'

  A. Yes

  B. No

  Correct Answer: A