702.3 Container Image Building (weight: 5) DEVOPS-TOOLS-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   In a multi-stage build, how do you copy an artifact from a previous stage into the final stage?

   • AEXPORT /path/to/artifact /destination
   • BADD --from=stage_name /path/to/artifact /destination
   • CRUN cp /path/to/artifact /destination
   • DCOPY --from=stage_name /path/to/artifact /destination
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A team is optimizing a Dockerfile for a Python application. The current Dockerfile copies the entire application source before running `pip install`. Developers frequently change the application code but rarely change the `requirements.txt` file. Which change would most improve build performance by leveraging layer caching?

   • ACopy `requirements.txt` first, run `pip install`, then copy the rest of the application source
   • BUse `COPY . /app` and then `RUN pip install --no-cache-dir -r /app/requirements.txt`
   • CUse `ADD . /app` instead of `COPY . /app`
   • DCombine `COPY . /app` and `RUN pip install` into a single RUN instruction
   Reveal Solution Discussion Select an answer first
4. 13application · easy

   A security review of a Dockerfile reveals that the application runs as the root user inside the container. The application does not require root privileges. Which Dockerfile instruction should be added to run the application as a non-root user?

   • A`CMD ["runuser", "-u", "appuser", "./app"]`
   • B`ENV USER=appuser`
   • C`USER 10001` after creating a user or using an existing UID
   • D`RUN useradd -r appuser`
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which base image is commonly used to minimize image size?

   • Acentos
   • Bubuntu
   • Cdebian
   • Dalpine
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A team is building a Debian-based image for a utility tool. The Dockerfile currently has separate RUN instructions for `apt-get update`, `apt-get install`, and `rm -rf /var/lib/apt/lists/*`. The team wants to reduce the final image size. Which change is most effective?

   • AKeep the instructions separate but add `--no-install-recommends` to the install command
   • BCombine the commands into a single RUN instruction: `RUN apt-get update && apt-get install -y pkg && rm -rf /var/lib/apt/lists/*`
   • CMove the `rm -rf /var/lib/apt/lists/*` to a separate RUN instruction after the install
   • DUse `apt-get clean` instead of `rm -rf /var/lib/apt/lists/*`
   Reveal Solution Discussion Select an answer first