DCA DCA Docker Security 1

Question 1

What is the purpose of Docker Content Trust (DCT)?

Accepted Answer

To sign and verify the authenticity and integrity of Docker images

Answer

To encrypt container-to-container traffic

Answer

To control user access to Docker registries

Answer

To scan images for OS vulnerabilities

Question 2

Which Linux feature does Docker use to filter the system calls a container can make to the kernel?

Accepted Answer

Seccomp

Answer

AppArmor

Answer

SELinux

Answer

Namespaces

Question 3

What does running a container with the `--privileged` flag do?

Accepted Answer

Grants the container almost all Linux capabilities and access to host devices

Answer

Runs the container process as root on the host filesystem

Answer

Makes the container filesystem read-only

Answer

Enables Docker Content Trust for that container

Question 4

What is the default user that processes run as inside a Docker container if not otherwise specified?

Accepted Answer

root

Answer

nobody

Answer

www-data

Answer

docker

Question 5

Which Linux kernel feature does Docker primarily use to isolate container processes from the host system?

Accepted Answer

namespaces

Answer

cgroups

Answer

capabilities

Answer

seccomp

Question 6

Which Docker feature is used to securely store and transmit sensitive data like passwords to Swarm services?

Accepted Answer

Docker secrets

Answer

Docker environment variables

Answer

Docker configs

Answer

Docker volumes