DCA Professional Standards & Ethics 3

Question 1

Which practice best upholds data privacy ethics when building Docker images that process user PII?

Accepted Answer

Ensure PII never appears in image layers, logs, or environment variables

Answer

PII must never be embedded in image layers, logs, or environment variables to comply with privacy regulations and ethical data handling.

Question 2

A company's Docker registry contains images with known CVEs. What is the ethical professional standard for handling them?

Accepted Answer

Mark them as deprecated, notify users, and provide patched replacements promptly

Answer

Responsible image management requires deprecating vulnerable images, notifying stakeholders, and providing patched alternatives in a timely manner.

Question 3

When running containers in a multi-tenant Docker environment, which security standard is most critical for ethical isolation?

Accepted Answer

Enforcing namespace isolation, network segmentation, and resource quotas per tenant

Answer

Multi-tenant environments require strict namespace isolation, network segmentation, and resource quotas to prevent one tenant from affecting another.

Question 4

A Docker image you maintain is being widely used. You discover it accidentally includes a private API key in an earlier layer. What should you do first?

Accepted Answer

Immediately revoke the API key, rebuild without it, and notify users to pull the new image

Answer

The exposed key must be revoked immediately since image layers are readable by anyone who has pulled the image.

Question 5

What does Docker Content Trust (DCT) enable from a professional ethics standpoint?

Accepted Answer

It verifies the authenticity and integrity of images using cryptographic signatures

Answer

DCT uses cryptographic signatures to verify that images come from a trusted publisher and have not been tampered with.

DCA - Docker Certified Associate Exam Practice Test

DCA - Docker Certified Associate Exam Practice Test

DCA Professional Standards & Ethics 3