DCA Regulatory Compliance & Legal Framework 2

Question 1

Under HIPAA regulations, which Docker practice best protects Protected Health Information (PHI) stored in container volumes?

Accepted Answer

Encrypting volumes at rest and enforcing access controls via secrets management

Answer

HIPAA requires both encryption of PHI at rest and strict access controls, so combining encrypted volumes with secrets management satisfies the Security Rule.

Question 2

Which open-source license requires that derivative works be distributed under the same license terms as the original software?

Accepted Answer

GNU GPL (Copyleft)

Answer

The GNU GPL is a copyleft license that requires derivative works to be released under the same GPL terms.

Question 3

A company must demonstrate that only authorized users accessed container registries during an audit. Which Docker Enterprise feature primarily supports this requirement?

Accepted Answer

Role-Based Access Control (RBAC) with audit logs in Docker Trusted Registry

Answer

DTR's RBAC combined with audit logs provides a record of who accessed which images and when, satisfying access control audit requirements.

Question 4

PCI DSS Requirement 6 mandates secure development practices. Which Docker workflow directly addresses this for containerized applications?

Accepted Answer

Integrating image vulnerability scanning into the CI/CD pipeline before deployment

Answer

Scanning images for vulnerabilities in CI/CD pipelines aligns with PCI DSS Req 6's mandate to identify and fix security vulnerabilities before deployment.

Question 5

What is the primary legal purpose of a Software Bill of Materials (SBOM) in a containerized environment?

Accepted Answer

To document all software components and dependencies for vulnerability tracking and license compliance

Answer

An SBOM inventories all software components so organizations can track vulnerabilities (e.g., Log4Shell) and verify license compliance across dependencies.

DCA - Docker Certified Associate Exam Practice Test

DCA - Docker Certified Associate Exam Practice Test

DCA Regulatory Compliance & Legal Framework 2