DCA Professional Standards & Ethics 5

Question 1

What ethical obligation exists when a Docker professional transitions to a new employer and has knowledge of the former employer's container infrastructure?

Accepted Answer

They must maintain confidentiality of proprietary configurations, credentials, and internal architecture details

Answer

Professional ethics and most employment agreements require maintaining confidentiality of proprietary technical information after departure.

Question 2

A Docker Certified Associate is asked to sign off on a container deployment they have not reviewed. What is the correct professional response?

Accepted Answer

Refuse to sign off without personally reviewing the deployment artifacts and security checks

Answer

Professional certifications carry ethical responsibility; signing off on unreviewed work exposes both the individual and the organization to unnecessary risk.

Question 3

Which action best demonstrates professional responsibility when a publicly available Dockerfile you authored is found to have a security flaw?

Accepted Answer

Publish a corrected version, add a security advisory, and notify known users of the vulnerability and fix

Answer

Publishing a fix, issuing a security advisory, and notifying users are the professionally responsible actions when a public artifact has a security flaw.

Question 4

When a team adopts a new container security scanning tool, how should professionals handle scan findings they disagree with?

Accepted Answer

Evaluate each finding on merit, document any accepted risks formally, and escalate disagreements through proper channels

Answer

Security findings should be evaluated carefully; accepted risks must be formally documented, and disagreements escalated through proper review processes.

Question 5

A Docker swarm cluster is shared between development and production workloads. What professional concern should be raised?

Accepted Answer

Mixing dev and production on the same cluster creates blast-radius and compliance risks that require strong isolation controls or separate clusters

Answer

Mixing dev and production workloads risks a dev misconfiguration affecting production and often violates compliance requirements for environment separation.

DCA - Docker Certified Associate Exam Practice Test

DCA - Docker Certified Associate Exam Practice Test

DCA Professional Standards & Ethics 5