DCA Cheat Sheet 2026

The 30 highest-yield DCA facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.

1. A security scan finds a critical CVE in a base image. What is the recommended remediation workflow in a Docker-based CI/CD pipeline? → Update the base image tag in the Dockerfile, rebuild, re-scan, and redeploy
2. How do regulations differ from industry standards in DCA practice? → Regulations are legally binding; standards are typically voluntary guidelines
3. Why is written communication important in DCA practice? → It creates a permanent record, ensures clarity, and provides reference for future actions
4. Which Dockerfile instruction, when used incorrectly, most commonly leads to unnecessarily large image sizes that fail image size quality gates? → RUN (installing packages without cleaning up cache in the same layer)
5. To export Prometheus-compatible metrics from the Docker daemon, which configuration option must be enabled? → "experimental": true and "metrics-addr"
6. Why is regular review important in DCA risk management? → Because conditions change and new risks emerge requiring updated assessments
7. What is multi-factor authentication (MFA) in DCA security? → A security method requiring two or more verification factors to gain access
8. How can John launch a container that utilizes the json-file log driver when he has configured his Docker daemon to use the syslog log driver by default? → By using “--log-driver json-file” along with docker run
9. You need to time-limit `docker events` to only show events that occurred in a specific window. Which flags accomplish this? → --since and --until
10. Which of the following parameters would allow you to SSH into an active "nginx" Docker container? → docker exec -it nginx /bin/sh
11. Which command lists all nodes currently participating in a Docker Swarm? → docker node ls
12. During project planning, the security team requires all containers to run as a non-root user. How is this enforced in a Dockerfile? → USER instruction before the CMD or ENTRYPOINT
13. Which log driver is the default for Docker containers when no driver is explicitly configured? → json-file
14. What does running a container with the `--privileged` flag do? → Grants the container almost all Linux capabilities and access to host devices
15. What is trend analysis in DCA reporting? → Examining data over time to identify patterns, directions, and changes in performance
16. What is the default subnet used by Docker's default bridge network (docker0)? → 172.17.0.0/16
17. What is cash flow management in DCA practice? → Monitoring and optimizing the timing of money coming in and going out of an organization
18. When planning secrets management for a Docker Swarm project, what is the correct way to create a secret from a file? → docker secret create my_secret ./secret.txt
19. Which `docker events` filter would show only container die events? → --filter type=container --filter event=die
20. Which command shows detailed information about a Docker network including its connected containers? → docker network inspect my-network
21. What command creates a user-defined bridge network named 'my-network'? → docker network create --driver bridge my-network
22. Which tool is specifically designed to scan Docker images for OS and library CVEs and integrates natively with Docker Hub? → Docker Scout
23. A project plan requires that Swarm service replicas are distributed evenly across availability zones. Which placement constraint achieves this? → --placement-pref 'spread=node.labels.az'
24. When using the `gelf` log driver, logs are sent to which type of endpoint? → A Graylog Extended Log Format UDP/TCP endpoint
25. A CI pipeline must build multi-architecture Docker images for both amd64 and arm64. Which tool and command accomplishes this in one step? → docker buildx build --platform linux/amd64,linux/arm64 -t myimage --push .
26. Which command exports a container's filesystem as a tar archive for offline security auditing? → docker export
27. Why is documentation critical in DCA regulatory compliance? → It provides evidence of compliance and creates a defensible record of activities
28. Which of the subsequent patterns would prevent any Python byte-code files from being copied during the building of a Docker image? → **/*.pyc
29. Which Docker daemon flag enables mutual TLS authentication for secure client-to-daemon communication? → --tlsverify
30. Which Docker Swarm feature automatically replaces a failed service task on a healthy node? → Task rescheduling via the reconciliation loop