EX188 Practice Test 14 — 15 Questions

Question 1

Which TWO instructions in a Containerfile can be used to set metadata or default execution parameters that influence how a container runs? (Choose two.)

Accepted Answer

CMD. CMD and ENTRYPOINT both define runtime execution behavior for containers.

Answer

RUN

Answer

COPY

Answer

FROM

Question 2

Which TWO Containerfile instructions are used to bring files or data from outside the container into the build context or image? (Choose two.)

Accepted Answer

COPY. COPY and ADD are the two instructions designed to move external files into the image filesystem.

Answer

GET

Answer

FETCH

Answer

IMPORT

Question 3

Which TWO options are valid flags for the 'podman build' command to specify build arguments and tags? (Choose two.)

Accepted Answer

--build-arg. --build-arg and --tag (-t) are standard options for podman build.

Answer

--volume

Answer

--publish

Answer

--env-file

Question 4

Which TWO statements are true regarding the EXPOSE instruction in a Containerfile? (Choose two.)

Accepted Answer

It informs Podman that the container listens on the specified network ports at runtime.. EXPOSE serves as documentation and assists orchestration tools in understanding which ports to publish when using flags like -P.

Answer

It replaces the need to define environment variables for port configuration.

Answer

It enforces strict firewall rules inside the container network namespace, blocking unexposed ports.

Answer

It automatically publishes all exposed ports to random host ports without needing the -p or -P flag.

Question 5

Which THREE statements are correct regarding the behavior and usage of the WORKDIR instruction? (Choose three.)

Accepted Answer

It can be used multiple times in a single Containerfile to change directories relative to previous WORKDIR paths or absolute paths.. WORKDIR sets the path, creates the directory if missing, and affects subsequent instructions.

Answer

It permanently modifies the host machine's current working directory where 'podman build' was executed.

Answer

It replaces the need to specify absolute paths in COPY and ADD instructions.

Question 6

Which THREE features or characteristics distinguish the ADD instruction from the COPY instruction in a Containerfile? (Choose three.)

Accepted Answer

ADD can automatically extract local compressed tar archive files into the destination directory.. ADD supports remote URLs, auto-extraction of tarballs, and local sources, whereas COPY only supports local sources.

Answer

ADD requires the source file to be located within a git repository, unlike COPY.

Answer

COPY supports remote URLs natively just like ADD.

Question 7

Which THREE statements are true concerning how Podman builds container images and utilizes the build context? (Choose three.)

Accepted Answer

A file named '.containerignore' (or '.dockerignore') can be used to exclude files from being sent to the build context.. The build context is sent to the builder, .containerignore excludes files, and standard stdin can be used.

Answer

Podman cannot accept a Containerfile via standard input (stdin); it must always read from a file on disk.

Answer

Files outside the build context directory can be freely copied into the image using standard COPY instructions without extra flags.

Question 8

Which THREE conditions or practices can cause layer cache invalidation during a 'podman build' operation? (Choose three.)

Accepted Answer

Modifying the content or modification timestamp (mtime) of a file referenced by a COPY instruction.. Cache invalidation happens when instructions change, files change (checksum/mtime), or ARG values change.

Answer

Adding a comment line '#' at the very top of the Containerfile before the first FROM instruction.

Answer

Running 'podman build' on a different physical workstation while using the exact same build context and Containerfile.

Question 9

Which THREE advanced configuration steps or flags are available when performing rootless builds or utilizing buildah/podman build advanced features? (Choose three.)

Accepted Answer

Using '--tls-verify=false' to bypass TLS verification when pulling base images from insecure registries.. Advanced build features include custom storage, volume/secret mounts, and architecture specification.

Answer

Using '--rm=false' to automatically keep intermediate build container containers indefinitely on disk after successful builds.

Answer

Using '--privileged-build' to grant full root host capabilities to a rootless container build.

Question 10

Which THREE practices should be observed when managing environment variables (ENV vs ARG) in Containerfiles for secure and efficient builds? (Choose three.)

Accepted Answer

Use 'ENV' for configuration parameters that the application needs to read during container runtime.. ARG is build-time and doesn't persist, ENV persists into runtime, and sensitive values shouldn't be baked in.

Answer

Ensure that 'ENV' variables defined in earlier stages automatically carry over into subsequent multi-stage build stages without re-declaration.

Answer

Use 'ENV' for passing secret API tokens so they are automatically encrypted in the image layers.

Question 11

You want to set the working directory for any subsequent RUN, CMD, ENTRYPOINT, COPY, and ADD instructions that follow it in the Containerfile. Which instruction achieves this?

Accepted Answer

WORKDIR. The WORKDIR instruction sets the working directory for any RUN, CMD, ENTRYPOINT, COPY, and ADD instruction that follows it in the Containerfile.

Answer

DIR

Answer

CD

Answer

PATH

Question 12

An administrator is configuring a systemd service using podman generate systemd and wants the generated service to stop and remove the container automatically when the service stops, and create a fresh container when it starts. Which flag should be added?

Accepted Answer

--new. The --new flag tells podman generate systemd to create a unit file that runs podman run (creating a new container) rather than podman start (using an existing container).

Answer

--ephemeral

Answer

--recreate

Answer

--auto-remove

Question 13

Which TWO of the following instructions in a Containerfile can be written using either the shell form or the exec form?

Accepted Answer

RUN. Both RUN, CMD, and ENTRYPOINT support both shell form (e.g., RUN yum update) and exec form (e.g., RUN ["yum", "update"]). Among the options, RUN and CMD are standard examples.

Answer

WORKDIR

Answer

FROM

Answer

ENV

Question 14

Which TWO instructions can be used to copy files or directories from a build context into a container image?

Accepted Answer

COPY. Both COPY and ADD can be used to copy files and directories from the build context into the container image filesystem.

Answer

PULL

Answer

INSTALL

Answer

GET

Question 15

A container named db_cache has stopped unexpectedly. An administrator wants to see the standard output logs generated by this container prior to its exit. Which command should be used?

Accepted Answer

podman logs db_cache. podman logs displays the logs of a container, including stopped ones, provided the logging driver captured them.

Answer

podman inspect --logs db_cache

Answer

podman output db_cache

Answer

podman history db_cache