A security scan of a Docker image has identified vulnerabilities in the base image. The team wants to reduce the attack surface. Which action is most effective?

Add more security tools to the image to detect vulnerabilities at runtime.

Run the container with --privileged to allow security tools to run.

Switch to a smaller, more secure base image such as alpine or distroless.

Ignore the vulnerabilities because they are in the base image.

A team is running a container that writes data to a volume. They need to back up the volume data to a tar file on the host. Which command sequence should be used?

Use docker commit to create an image from the container and then docker save.

Use docker export to export the container's filesystem.

Run a temporary container that mounts the volume and uses tar to create an archive on the host.

Use docker cp to copy the volume directory from the running container.

EC-CouncilCertified DevSecOps Engineer

Domain 6Objective 2

Docker Container Deployment ECDE Practice Questions (Page 7)

Part of the Operate and Monitor Stage domain, which makes up ~21% of our current practice bank.

41questions here

9free pages

7concepts

Questions 31–35

31expert · medium
A container named 'api' is running but is not responding to requests. The engineer suspects the container is not listening on the expected port. Which command should be used to verify the port mapping and the container's network settings?
Select an answer first
32application · medium
A container is not starting correctly, and the administrator needs to see the output of the application's startup logs to diagnose the issue. Which command should they use?
Select an answer first
33application · medium
A security scan of a Docker image has identified vulnerabilities in the base image. The team wants to reduce the attack surface. Which action is most effective?
Select an answer first
34application · medium
A team uses Docker Compose for a multi-container application. They have made changes to the docker-compose.yml file and want to apply the changes by recreating only the containers whose configuration has changed. Which command should they use?
Select an answer first
35expert · hard
A team is running a container that writes data to a volume. They need to back up the volume data to a tar file on the host. Which command sequence should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECDE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECDE” is a trademark of its owner, used for identification only.

Docker Container Deployment ECDE Practice Questions (Page 7)

Questions 31–35

A container named 'api' is running but is not responding to requests. The engineer suspects the container is not listening on the expected port. Which command should be used to verify the port mapping and the container's network settings?

A container is not starting correctly, and the administrator needs to see the output of the application's startup logs to diagnose the issue. Which command should they use?

A security scan of a Docker image has identified vulnerabilities in the base image. The team wants to reduce the attack surface. Which action is most effective?

A team uses Docker Compose for a multi-container application. They have made changes to the docker-compose.yml file and want to apply the changes by recreating only the containers whose configuration has changed. Which command should they use?

A team is running a container that writes data to a volume. They need to back up the volume data to a tar file on the host. Which command sequence should be used?

Keep studying — Operate and Monitor Stage