EX188 Practice Test 17 — 15 Questions

Question 1

Which TWO actions can be performed using the 'podman network' subcommand? (Choose two.)

Accepted Answer

ls. 'podman network' manages networks including listing (ls) and removing (rm).

Answer

start

Answer

build

Answer

commit

Question 2

An administrator needs to attach to the terminal of a currently running container named backend_app to view its active console output interactively. Which command should be used?

Accepted Answer

podman attach backend_app. podman attach connects local standard input, output, and error streams to a running container.

Answer

podman console backend_app

Answer

podman connect backend_app

Answer

podman join backend_app

Question 3

An operator needs to troubleshoot a failing service inside a container named 'auth_api'. Which command should the operator run to view the standard output log stream generated by this container?

Accepted Answer

podman logs auth_api. The 'podman logs' command fetches the logs generated by a container.

Answer

podman output auth_api

Answer

podman events auth_api

Answer

podman history auth_api

Question 4

You are writing a Containerfile to build a custom application image using podman build. Which instruction should you use as the mandatory first non-comment instruction to define the base image?

Accepted Answer

FROM. The FROM instruction initializes a new build stage and sets the Base Image for subsequent instructions. Every valid Containerfile or Dockerfile must start with a FROM instruction.

Answer

IMPORT

Answer

BASE

Answer

INIT

Question 5

An administrator is working with Podman Quadlets to manage container lifecycles via systemd. Which TWO statements regarding Quadlet file naming conventions and directory locations are correct? (Choose TWO)

Accepted Answer

Quadlet configuration files are automatically translated into native systemd unit files by Podman generators.. Quadlet configuration files use specific extensions like .container and system-wide files reside in /etc/containers/systemd/.

Answer

Rootless Quadlet files are placed in /var/lib/containers/systemd/ root directory.

Answer

Quadlet files must be manually compiled using gcc before systemd can read them.

Answer

Quadlet container unit files must use the exact file extension .service.container.

Question 6

An administrator is managing rootless containers and needs to understand how user namespaces and security isolation function. Which TWO of the following configuration files or tools are directly relevant to rootless user mapping and systemd user persistence? (Choose TWO)

Accepted Answer

/etc/subuid and /etc/subgid. /etc/subuid defines subordinate UID ranges, and loginctl enable-linger configures user session persistence for systemd user services.

Answer

systemctl system-wide-users

Answer

/etc/containers/rootless.conf

Answer

/var/lib/podman/subuid.conf

Question 7

An administrator needs to execute a package update and install dependencies during the podman build process, ensuring these commands are committed as a new layer in the final image. Which instruction accomplishes this?

Accepted Answer

RUN. The RUN instruction executes any commands in a current layer on top of the current image and commits the results. The resulting committed image will be used for the next step in the Containerfile.

Answer

EXEC

Answer

START

Answer

CMD

Question 8

Which THREE practices are recommended when optimizing cache utilization during image builds with podman build?

Accepted Answer

Place instructions that change frequently, such as COPYing source code, near the end of the Containerfile.. To maximize cache efficiency, place instructions that change frequently (like copying source code) lower down in the Containerfile, group related installation steps into single RUN commands, and order instructions from least frequently changed to most frequently changed.

Answer

Use the --no-cache flag on every routine build to ensure absolute freshness.

Answer

Always place COPY . . at the very top of the Containerfile before installing software dependencies.

Question 9

An administrator needs to view all network ports exposed or mapped by a container named web_prod using a simplified summary command. Which command can be used?

Accepted Answer

podman port web_prod. podman port displays public port mappings for a container.

Answer

podman show-ports web_prod

Answer

podman network list-ports web_prod

Answer

podman inspect --ports web_prod

Question 10

By default, podman build executes build instructions using the root user. You want to switch the execution context to a non-privileged user named 'appuser' for all subsequent RUN, CMD, and ENTRYPOINT instructions. Which instruction should you use?

Accepted Answer

USER. The USER instruction sets the user name (or UID) and optionally the user group (or GID) to use when running the image and for any RUN, CMD and ENTRYPOINT instructions that follow it in the Containerfile.

Answer

LOGIN

Answer

SU

Answer

ACCOUNT

Question 11

An administrator wants to retrieve only the IP address of a running container named web_svc by querying podman inspect with a specific format template. Which command is correct?

Accepted Answer

podman inspect --format='{{ .NetworkSettings.IPAddress }}' web_svc. Go templates in podman inspect can target network settings, such as .NetworkSettings.IPAddress.

Answer

podman ps --format='{{ .IP }}' web_svc

Answer

podman inspect --ip web_svc

Answer

podman inspect --query=ip web_svc

Question 12

An administrator needs to copy a configuration file named /tmp/nginx.conf from the host into a running container named web_server at path /etc/nginx/nginx.conf. Which command should be used?

Accepted Answer

podman cp /tmp/nginx.conf web_server:/etc/nginx/nginx.conf. podman cp copies files/folders between a container and the local filesystem.

Answer

podman push --target web_server /tmp/nginx.conf

Answer

podman transfer /tmp/nginx.conf web_server:/etc/nginx/nginx.conf

Answer

podman import /tmp/nginx.conf web_server:/etc/nginx/nginx.conf

Question 13

An administrator is managing rootless containers and wants to enable systemd linger for their user account so that user-level container services continue running after the user logs out. Which command should be run?

Accepted Answer

loginctl enable-linger. loginctl enable-linger enables systemd user services to persist after logout for rootless users.

Answer

systemctl enable --user --linger

Answer

podman system linger enable

Answer

usermod --linger=true $USER

Question 14

An administrator wants to examine the internal state, environment variables, or port mappings of a running container. Which TWO commands or techniques are appropriate? (Choose TWO)

Accepted Answer

podman port. podman inspect retrieves low-level metadata, and podman port displays mapped network ports.

Answer

podman list-ports

Answer

podman env

Answer

podman show-env

Question 15

You need to define a persistent environment variable named 'PORT' with the value '8080' that is available during both the build process and when running containers from the resulting image. Which instruction should you use?

Accepted Answer

ENV. The ENV instruction sets the environment variable to the value . This value will be persistent in the container when it runs and can also be referenced during build time.

Answer

SET

Answer

VAR

Answer

EXPORT