Project Planning & Execution Flashcards

A project manager wants to enforce that all production services use only images from a trusted registry. Which Docker feature supports this at the Swarm level?

Answer: Docker Content Trust (DCT) enforces signed image verification before deployment

Docker Content Trust uses Notary to verify image signatures, preventing unsigned or tampered images from running.

During execution planning, a team needs containers to communicate using service names as hostnames within a Docker Compose application. What enables this?

Answer: Docker Compose automatically creates a network where service names resolve as DNS hostnames

Docker Compose creates a default bridge network with embedded DNS so each service name resolves to the correct container IP.

When planning log aggregation for a Dockerized project, which logging driver sends container logs directly to a remote syslog endpoint?

Answer: syslog

The syslog logging driver forwards container log output to a syslog-compatible endpoint specified by --log-opt syslog-address.

A project calls for containers to share the same network namespace so they can communicate over localhost. Which Docker run option achieves this?

Answer: docker run --network=container:

The --network=container: option joins a new container to an existing container's network namespace, sharing the same network interfaces.

During a Docker project retrospective, the team notes image sizes are too large. Which multi-stage build pattern most effectively reduces final image size?

Answer: Building in a full SDK image and copying only compiled artifacts to a minimal runtime image

Multi-stage builds compile in a full SDK image and COPY only the final binary/artifact into a slim runtime image, excluding build tools from the final image.

A project plan requires that Swarm service replicas are distributed evenly across availability zones. Which placement constraint achieves this?

Answer: --placement-pref 'spread=node.labels.az'

The --placement-pref spread option distributes replicas evenly across the values of a node label, such as availability zone.

When executing a Swarm stack deployment, which command deploys or updates all services defined in a Compose file to the Swarm?

Answer: docker stack deploy -c docker-compose.yml

The 'docker stack deploy -c ' command deploys a multi-service application to Docker Swarm using a Compose v3 file.