Mirantis DCA Docker Certified Associate Exam Practice Questions
US$39
Every question with the correct answer and why the other options are wrong.
Card, Apple Pay, Google Pay or PayPal. Your PDF is prepared and emailed to you after checkout, usually within a few hours.
Three of the 135 questions in this pack
Question 1
When an application being managed by UCP fails, you would like a summary of all requests made to the UCP API in the hours leading up to the failure.
What must be configured correctly beforehand for this to be possible?
Show answer and explanation
Correct answer: A. UCP audit logs must be set to the ‘metadata’ or ‘request’ level.
UCP can produce audit logs that record requests made to the UCP API. Audit logging has three levels: none, metadata and request. At the metadata level UCP records information about each request, such as the user, time and endpoint, and at the request level it also records the request body. Audit logging must be enabled at one of these two levels before the failure occurs, because UCP cannot reconstruct a history of API requests that it never recorded. The audit entries are written to the UCP controller logs, where they can be collected and reviewed.
Why the other options are wrong
- B. Engine log drivers forward container output and have no metadata or request levels for recording UCP API calls.
- C. UCP logging levels control the verbosity of component logs and do not produce an audit record of API requests.
- D. Raising the kube-apiserver log threshold to warning reduces detail and does not record a history of UCP API requests.
Question 2
A user’s attempts to set the system time from inside a Docker container are unsuccessful.
Could this be blocking this operation?
SELinux
Show answer and explanation
Correct answer: B. No
Changing the system clock requires the Linux capability CAP_SYS_TIME. The system clock is not namespaced, so a change made inside a container would alter the time for the host and every other container. For that reason Docker drops CAP_SYS_TIME from the default capability set, and the attempt fails with a permission error whether or not SELinux is enabled. SELinux labels control which files and processes a container can access; they are not what prevents a container from setting the time. Granting the capability with --cap-add SYS_TIME is what would allow the operation.
Why the other options are wrong
- A. The operation is blocked because Docker drops the CAP_SYS_TIME capability by default, not because of SELinux.
Question 3
One of several containers in a pod is marked as unhealthy after failing its livenessProbe many times.
Is this the action taken by the orchestrator to fix the unhealthy container?
The unhealthy container is restarted.
Show answer and explanation
Correct answer: A. Yes
A livenessProbe tells the kubelet how to check whether a container is still working. When the probe fails more times in a row than its failureThreshold allows, the kubelet kills the container and restarts it according to the pod's restartPolicy, which is Always by default. Only the failing container is restarted; the other containers in the pod keep running and the pod itself is not rescheduled to another node. Restarting the unhealthy container is therefore exactly the action Kubernetes takes.
Why the other options are wrong
- B. Repeated livenessProbe failures cause the kubelet to restart that container, so the statement is correct.
How much of the Mirantis DCA Docker Certified Associate bank is free?
135 questions in the bankEach step includes the one before, so buying only adds new questions.
- You are here10questionsFree sampleThree on this page, all ten as a PDF.Download the sample
- 1612% of the bankPractice pageFree on the site, every answer explained.Go to the practice page
- 6649% of the bankHalf PackFree by email, as one PDF, every answer explained.Get the Half Pack
- 135100%, the whole bankFull pack, US$39Plus the questions-only PDF, monthly updates, refund if you fail.Get the full pack
What’s in the Mirantis DCA Docker Certified Associate pack
- 135 questions mapped to the DCA exam objectives
- Answers and explanations for every question, including the wrong options
- A questions-only PDF for timed practice runs
- Delivered by email shortly after checkout
- Free monthly updates
- Pass or your money back
A failed DCA attempt costs another US$199 plus weeks of restudying. This pack is US$39, paid once, and refunded if you fail.
What makes the DCA hard
Only 13 of the 55 questions are classic multiple choice. The other 42 use the discrete option multiple choice (DOMC) format, so you need to know each command, flag and behaviour well enough to judge it on its own. Recognising the right answer in a list is not enough.
The scope goes beyond running containers. Mirantis covers Docker essentials, Swarm cluster creation and management, Mirantis Kubernetes Engine and Mirantis Secure Registry. Candidates who only use Docker on a laptop usually lose marks on Swarm services, MKE and MSR. You have 90 minutes, and a fail means a 14 day wait and a new payment.
About the exam
The Docker Certified Associate (DCA) is the Docker certification now run by Mirantis. It validates working knowledge of Docker essentials (managing containers and building images), Docker Swarm, Mirantis Kubernetes Engine (MKE) and Mirantis Secure Registry (MSR). Mirantis designs it for professionals with 6 to 12 months of Docker experience.
Exam topic areas
- Docker essentials: managing containers and creating container images
- Docker Swarm: creating and managing swarm clusters
- Mirantis Kubernetes Engine (MKE)
- Mirantis Secure Registry (MSR)
55 questions (13 multiple choice, 42 DOMC) in 90 minutes. Remotely proctored on Windows or Mac, with results straight after the exam. US$199 or EUR 200 per attempt; retakes are allowed after 14 days and are paid again.
Read next: Linux Foundation CKA practice questions · Linux Foundation KCNA practice questions
Questions before you buy
How quickly do I receive it?
Your PDF is prepared and sent to your email address after checkout, and you get a confirmation as soon as it is on its way.
Are updates included?
Yes. The pack is updated every month for as long as the exam is live, and updates are free for everyone who has bought it.
What if I fail the exam?
We refund the pack, or swap it for any other pack if you would rather keep studying. Sit the exam 7 to 30 days after buying, then send your official score report within 7 days of the exam date, as set out in the refund policy.
What is your pass rate?
99% of customers who prepare with a CertStash pack pass. If you do not, we refund the pack, or swap it for another pack.
Can I share it with colleagues?
Each purchase is licensed to one person. For a team, school or training organisation, email support@certstash.com for a licence that fits.