A containerized application needs to access a database password. The team wants to avoid storing the password in the image or in environment variables in the Dockerfile. Which approach is the most secure?

Use a bind mount to mount a file containing the password.

Hardcode the password in the application code.

Store the password in an environment variable in the Dockerfile.

Use Docker secrets to pass the password at runtime.

A security audit reveals that a container image has several high-severity vulnerabilities. The team needs to remediate the vulnerabilities while minimizing the impact on the application's functionality. Which approach should they take?

Remove the vulnerable packages from the image without updating the base image.

Ignore the vulnerabilities because they are only in the base image.

Use a runtime security tool to block exploitation of the vulnerabilities.

Update the base image to a patched version and rebuild the image, then re-scan to verify the vulnerabilities are resolved.

A container running a stateful application was accidentally stopped. The administrator wants to restart it, but is concerned that the container's data might be lost. The container was originally started without any volumes or bind mounts. What is the best course of action?

Use docker cp to copy data out of the stopped container before restarting.

Use docker commit to save the current state as an image, then run a new container from that image.

Remove the container and run a new one with a volume to persist data.

Restart the container with docker start; the data in the writable layer is preserved as long as the container is not removed.

A database container stores its data in /var/lib/postgresql/data. The team wants to back up the data by copying the directory from the container to the host. Which command should be used?

docker cp mydb:/var/lib/postgresql/data /backup/

docker export mydb > /backup/mydb.tar

docker save mydb > /backup/mydb.tar

EC-CouncilCertified DevSecOps Engineer

Domain 6Objective 2

Docker Container Deployment ECDE Practice Questions (Page 1)

Part of the Operate and Monitor Stage domain, which makes up ~21% of our current practice bank.

41questions here

9free pages

7concepts

Questions 1–5

1foundation · medium
Which docker run option publishes a container's port 80 to host port 8080?
Select an answer first
2application · medium
A containerized application needs to access a database password. The team wants to avoid storing the password in the image or in environment variables in the Dockerfile. Which approach is the most secure?
Select an answer first
3expert · hard
A security audit reveals that a container image has several high-severity vulnerabilities. The team needs to remediate the vulnerabilities while minimizing the impact on the application's functionality. Which approach should they take?
Select an answer first
4expert · hard
A container running a stateful application was accidentally stopped. The administrator wants to restart it, but is concerned that the container's data might be lost. The container was originally started without any volumes or bind mounts. What is the best course of action?
Select an answer first
5application · easy
A database container stores its data in /var/lib/postgresql/data. The team wants to back up the data by copying the directory from the container to the host. Which command should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECDE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECDE” is a trademark of its owner, used for identification only.