Practice Test GeeksDCA - Docker Certified Associate Exam Practice Test
← All DCA Flashcard Decks

DCA Docker Security Flashcards

6 cards from real DCA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 6 DCA Docker Security flashcards as text

  1. What does the `--cap-drop ALL` flag do when running a container?

    Answer: Drops all Linux capabilities from the container process

    The `--cap-drop ALL` flag removes all Linux capabilities from the container, which can then be selectively restored with `--cap-add`.

  2. Which Linux feature is used by Docker to enforce CPU and memory resource limits on containers?

    Answer: cgroups (control groups)

    Linux cgroups (control groups) limit, prioritize, and monitor resource usage including CPU, memory, and I/O for Docker containers.

  3. How are Docker secrets passed to a container in Swarm mode?

    Answer: As files mounted under /run/secrets/ inside the container

    Docker secrets are mounted as in-memory tmpfs files at /run/secrets/ inside the container, never exposed in environment variables or image layers.

  4. What format is used to define a custom seccomp profile for a Docker container?

    Answer: A JSON profile file

    Docker seccomp profiles are defined in JSON format, specifying the default action and the list of allowed or denied system calls.

  5. What does the `--read-only` flag do when running a Docker container?

    Answer: Makes the container's root filesystem read-only

    The `--read-only` flag mounts the container's root filesystem as read-only, preventing any process from writing to it.

  6. What Linux mandatory access control (MAC) systems can Docker integrate with for additional container security?

    Answer: Both AppArmor and SELinux, depending on the host OS

    Docker can integrate with both AppArmor (on Ubuntu/Debian hosts) and SELinux (on RHEL/CentOS hosts) to apply mandatory access control policies to containers.

How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

  1. training.mirantis.com — Test delivery, eligibility, fees, passing score, renewal, retake policy, score release, time limit, score validity · verified Oct 2026