QUESTION: 13

A DevOps engineer has built a new container and must open port 8080 for intercontainer communication. Which command must be added in a Dockerfile to accomplish this goal?

EXPOSE 8080
FIREWALL ADD-PORT 8080
PORT 8080
OPEN PORT 8080

Answer(s): A

Reveal Solution Next Question

QUESTION: 14

Which two actions help limit the attack surface of your Docker container? (Choose two.)

Run only a single service in each container.
Run all services in a single image.
Use version tags for base images and dependencies.
Use Kali Linux as a base image.
Download images over HTTPS supporting sites.

Answer(s): A,C

Explanation:

Running only a single service in each container and using version tags for base images and dependencies helps limit the attack surface of your Docker container. This ensures that only the necessary services are running and that you always have the latest versions of the base images and their dependencies, reducing the risk of malicious code being included in the container image.

Reference:

Docker Documentation, Security Best Practices.

Reveal Solution Next Question

QUESTION: 15

A DevOps engineer has built a container to host a web-server and it must run as an executable.
Which command must be configured in a Dockerfile to accomplish this goal?

ENTRYPOINT <usr/sbin/apache2ctl>
ENTRYPOINT ["/usr/sbin/apache2ctl", "-D", "FOREGROUND"]
ENTRYPOINT ["BACKGROUND", "-D", "/usr/sbin/apache2ctl"]
ENTRYPOINT {usr/sbin/apache2ctl}

Answer(s): B

Reveal Solution Next Question

QUESTION: 16

Which Docker command is used to start an interactive Bash shell in a running container named "test"?

docker attach -it test /bin/bash
docker run -it test /bin/bash
docker exec -it test /bin/bash
docker run test /bin/bash

Answer(s): C

Reveal Solution Next Question

Free 300-910 Exam Braindumps (page: 5)

QUESTION: 13

QUESTION: 14

Explanation:

Reference:

QUESTION: 15

QUESTION: 16