DCA Professional Standards & Ethics 4

Question 1

A team is under deadline pressure to ship a container update. The security scan shows a high-severity CVE. What is the ethically correct action?

Accepted Answer

Block the release until the CVE is patched or a formal risk acceptance is documented by stakeholders

Answer

Shipping a known high-severity CVE without documented risk acceptance is professionally irresponsible and exposes users to harm.

Question 2

What professional standard applies when documenting a Docker Compose file used in production?

Accepted Answer

Include service dependencies, port mappings, environment variable meanings, and security considerations

Answer

Production infrastructure must be documented thoroughly so any team member can understand, maintain, and securely operate the system.

Question 3

An engineer uses a personal Docker Hub account to store company images. Which professional concern does this raise?

Accepted Answer

Company intellectual property and access control are at risk if the personal account is compromised or the employee leaves

Answer

Storing company images in a personal account creates IP ownership ambiguity and access control gaps when the employee departs.

Question 4

Which practice best demonstrates professional ethics when running automated container builds in a CI/CD pipeline?

Accepted Answer

Use scoped service account credentials with minimal required permissions for each pipeline stage

Answer

CI/CD pipelines should use scoped, least-privilege credentials to minimize the blast radius of a credential leak.

Question 5

A Docker swarm node is running at 95% memory utilization. What is the professional response?

Accepted Answer

Investigate the cause, scale the service or add capacity, and set memory limits to prevent recurrence

Answer

Persistent high utilization requires investigation, capacity planning, and applying resource limits to prevent instability.

DCA - Docker Certified Associate Exam Practice Test