Utilize Docker to Containerize an Application 350-901 Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A developer accidentally pushed an image with a sensitive credential baked in to a private registry. The credential is in the image's environment variable. The developer needs to ensure the credential is no longer available. Which action is most effective?

   • ARemove the credential from the Dockerfile and rebuild locally
   • BDelete the image from the registry and rebuild it without the credential, then push the new image
   • CChange the environment variable in the running container
   • DOverwrite the image tag with a new image that does not contain the credential
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which command removes a stopped container with the ID 'abc123'?

   • Adocker remove abc123
   • Bdocker rmi abc123
   • Cdocker stop abc123
   • Ddocker rm abc123
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A team is containerizing a Node.js application. The Dockerfile currently uses 'FROM node:latest', copies the entire project directory, and runs 'npm install' at build time. A security audit flags that the image is large, contains unnecessary development files, and runs as root. The team wants to reduce the image size and improve security without changing the application code. Which Dockerfile change best addresses all concerns?

   • AUse a multi-stage build with a final stage based on node:alpine, copy only the production dependencies, and add USER node
   • BUse FROM node:latest, run npm prune --production, and add USER node
   • CChange FROM node:latest to FROM node:alpine and add USER node
   • DAdd a .dockerignore file and add USER node
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which Dockerfile instruction is used to specify the base image for a containerized application?

   • ACMD
   • BCOPY
   • CRUN
   • DFROM
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   Two containers, app and db, are running on the same Docker host. The app container needs to communicate with the db container using the hostname 'db' on port 5432. Both containers are attached to the default bridge network. The app container cannot resolve the hostname 'db'. What is the most likely cause?

   • AThe db container is not exposing port 5432 with -p.
   • BThe app container is running with the host network driver.
   • CThe default bridge network does not provide automatic DNS resolution between containers.
   • DThe db container is not running in detached mode.
   Reveal Solution Discussion Select an answer first