DCA DCA Docker Security 1

Question 1

What is the purpose of Docker Content Trust (DCT)?

Accepted Answer

To sign and verify the authenticity and integrity of Docker images

Answer

Docker Content Trust uses digital signatures via The Update Framework (TUF) to verify the integrity and publisher of Docker images.

Question 2

Which Linux feature does Docker use to filter the system calls a container can make to the kernel?

Accepted Answer

Seccomp

Answer

Docker uses seccomp (secure computing mode) profiles to restrict which system calls a container process can invoke.

Question 3

What does running a container with the `--privileged` flag do?

Accepted Answer

Grants the container almost all Linux capabilities and access to host devices

Answer

The `--privileged` flag grants the container nearly all the same access to the host as native processes running outside containers.

Question 4

What is the default user that processes run as inside a Docker container if not otherwise specified?

Accepted Answer

root

Answer

By default, container processes run as root (UID 0) unless a different user is specified via the USER Dockerfile instruction or the --user runtime flag.

Question 5

Which Linux kernel feature does Docker primarily use to isolate container processes from the host system?

Accepted Answer

namespaces

Answer

Linux namespaces provide isolation for PIDs, network interfaces, mount points, users, and other system resources between containers and the host.

DCA - Docker Certified Associate Exam Practice Test

DCA - Docker Certified Associate Exam Practice Test

DCA DCA Docker Security 1