A team is building a Dockerfile for an application that requires an API key at build time to download dependencies from a private repository. The team must ensure the API key is not present in the final image or in any intermediate layer that could be inspected. Which approach is most secure?

Use a multi-stage build: pass the API key as a build ARG in the first stage, download dependencies, and copy only the artifacts to the final stage

Embed the API key in the Dockerfile using `ENV`

Copy the API key into the image and delete it in a later RUN instruction

Use Docker BuildKit's `--secret` flag to mount the API key as a secret during the build

A team builds a container image for a web application. The application needs a build-time flag to enable a specific feature during compilation, and a runtime variable to set the logging level. The team wants to avoid hardcoding these values in the Dockerfile. Which combination of instructions should be used?

Use `ARG` for the build-time flag and `ENV` for the runtime logging level

Use `ENV` for the build-time flag and `ARG` for the runtime logging level

Use `ARG` for both the build-time flag and the runtime logging level

Use `ENV` for both the build-time flag and the runtime logging level

What is the purpose of the `latest` tag in Docker?

It is automatically updated to the newest image version

It is a default tag that points to the most recently built image

It is a special tag that cannot be overwritten

It is a conventional tag used to indicate the most recent stable version

LPI DevOps Tools Engineer

Domain 2Objective 3

702.3 Container Image Building (weight: 5) DEVOPS-TOOLS-ENGINEER Practice Questions (Page 2)

Part of the 702 Application Container domain, which makes up ~18% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–11 in this domain), expect 2–4 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

10concepts

Questions 6–10

6foundation · easy
Which instruction in a Containerfile copies files from the build context into the image?
Select an answer first
7expert · hard
A team is building a Dockerfile for an application that requires an API key at build time to download dependencies from a private repository. The team must ensure the API key is not present in the final image or in any intermediate layer that could be inspected. Which approach is most secure?
Select an answer first
8application · medium
A team builds a container image for a web application. The application needs a build-time flag to enable a specific feature during compilation, and a runtime variable to set the logging level. The team wants to avoid hardcoding these values in the Dockerfile. Which combination of instructions should be used?
Select an answer first
9foundation · easy
What is the purpose of the `latest` tag in Docker?
Select an answer first
10foundation · easy
Which instruction is used to set a runtime environment variable in a container image?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DEVOPS-TOOLS-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “DEVOPS-TOOLS-ENGINEER” is a trademark of its owner, used for identification only.

702.3 Container Image Building (weight: 5) DEVOPS-TOOLS-ENGINEER Practice Questions (Page 2)

Questions 6–10

Which instruction in a Containerfile copies files from the build context into the image?

A team is building a Dockerfile for an application that requires an API key at build time to download dependencies from a private repository. The team must ensure the API key is not present in the final image or in any intermediate layer that could be inspected. Which approach is most secure?

What is the purpose of the `latest` tag in Docker?

Which instruction is used to set a runtime environment variable in a container image?

Keep studying — 702 Application Container