EX188 Practice Test 18 — 15 Questions

Question 1

An auditor reviewing your Containerfile notices an EXPOSE instruction for port 80. What is the primary function of the EXPOSE instruction?

Accepted Answer

It documents which ports the container listens on at runtime.. The EXPOSE instruction informs Podman that the container listens on the specified network ports at runtime. It functions as a type of documentation between the person who builds the image and the person who runs the container, though ports can still be published manually via flags.

Answer

It opens firewall ports on the underlying RHEL host system permanently.

Answer

It encrypts network traffic entering the specified container port.

Answer

It automatically publishes all exposed ports to random host ports without flags.

Question 2

An administrator needs to start a container named webapp from the image docker.io/library/httpd in the background. Which podman command should be used?

Accepted Answer

podman run -d --name webapp docker.io/library/httpd. The podman run command with the -d (detached) flag starts a container in the background.

Answer

podman up -d --name webapp docker.io/library/httpd

Answer

podman container create -d --name webapp docker.io/library/httpd

Answer

podman start -d docker.io/library/httpd --name webapp

Question 3

An administrator is using Podman Quadlets to manage containers via systemd. Where must the Quadlet .container configuration file be placed for system-wide root containers?

Accepted Answer

/etc/containers/systemd/. System-wide Quadlet files are placed in /etc/containers/systemd/.

Answer

/etc/systemd/system/containers/

Answer

/var/lib/containers/systemd/quadlets/

Answer

/etc/systemd/system/

Question 4

When generating Kubernetes YAML using 'podman generate kubernetes', which TWO object types can be targeted or generated by the command? (Choose two.)

Accepted Answer

Deployment. Podman can generate Kubernetes Pod and Deployment manifests.

Answer

DaemonSet

Answer

StatefulSet

Answer

Ingress

Question 5

An administrator needs to inspect the configuration details, including subnet and gateway, of an existing custom network named 'my-net'. Which command should be executed?

Accepted Answer

podman network inspect my-net. The 'podman network inspect' command displays detailed configuration JSON for a specified network.

Answer

podman network show my-net

Answer

podman network details my-net

Answer

podman inspect network my-net

Question 6

Which configuration block in a Podman Compose YAML file is used to define custom isolated networks for the multi-container application?

Accepted Answer

networks:. At the root level of a Compose file, the 'networks:' top-level element defines custom networks that services can attach to.

Answer

interfaces:

Answer

bridges:

Answer

connections:

Question 7

An administrator wants to find out which host port is mapped to port 80/tcp inside a running container named proxy_svr, using format templating with podman inspect. Which command accomplishes this?

Accepted Answer

podman inspect --format='{{range $p, $conf := .NetworkSettings.Ports}} {{$p}} -> {{(index $conf 0).HostPort}} {{end}}' proxy_svr. Port bindings are stored within NetworkSettings.Ports in the inspect JSON structure.

Answer

podman ports proxy_svr

Answer

podman inspect --ports proxy_svr

Answer

podman ps --filter port=80

Question 8

An administrator is managing rootless Podman containers as a non-root user and wants to ensure that these containers automatically start upon system boot and persist across reboots using systemd. Which TWO steps or commands are required to accomplish this? (Choose TWO)

Accepted Answer

Run 'loginctl enable-linger <username>' to allow the user's systemd instance to run in the background when not logged in.. Rootless Podman persistence via systemd requires lingering to be enabled for the user so systemd runs when they are logged out, and generating/enabling a systemd service file.

Answer

Configure the container restart policy to always using '--restart always' without systemd.

Answer

Run 'systemctl enable --now podman' with root privileges.

Answer

Modify the global '/etc/rc.local' script to execute 'podman start' on boot.

Question 9

An administrator needs to commit the changes made to a running container named test_lab into a new image named my_custom_img:latest. Which command should be used?

Accepted Answer

podman commit test_lab my_custom_img:latest. podman commit creates a new image from a container's changes.

Answer

podman create-image test_lab my_custom_img:latest

Answer

podman save test_lab my_custom_img:latest

Answer

podman build --container test_lab -t my_custom_img:latest

Question 10

How do you stop and remove containers, networks, and volumes created by a Podman Compose file?

Accepted Answer

podman-compose down. 'podman-compose down' tears down the entire application stack defined in the compose file.

Answer

podman-compose rm --all

Answer

podman-compose destroy

Answer

podman-compose stop --purge

Question 11

When generating a Kubernetes Pod YAML from a Podman container using 'podman generate kubernetes', how are published ports mapped into the resulting Kubernetes manifest?

Accepted Answer

They are translated into container port definitions within the containers spec array.. Published ports are translated into container ports inside the pod specification and exposed via service/ports specifications depending on options.

Answer

They are converted into host-level iptables rules embedded in annotations.

Answer

They are ignored entirely and must be added manually.

Answer

They cause the generation command to fail with a port conflict error.

Question 12

An administrator is troubleshooting container startup failures and wants to inspect the exact entrypoint and command arguments configured for a container named app_run before it starts. Which inspect format expression retrieves this?

Accepted Answer

podman inspect --format='{{.Config.Entrypoint}} {{.Config.Cmd}}' app_run. The entrypoint and command arguments are stored in .Config.Entrypoint and .Config.Cmd.

Answer

podman ps --format='{{.Command}}' app_run

Answer

podman inspect --format='{{.State.Command}}' app_run

Answer

podman inspect --format='{{.Args}}' app_run

Question 13

An administrator is troubleshooting container exit codes and low-level state details. Which TWO of the following inspect format expressions correctly extract container state attributes? (Choose TWO)

Accepted Answer

podman inspect --format='{{.State.StartedAt}}' container_name. .State.ExitCode and .State.StartedAt are valid Go template expressions for podman inspect.

Answer

podman inspect --format='{{.Metadata.ExitCode}}' container_name

Answer

podman inspect --format='{{.Status.Running}}' container_name

Answer

podman inspect --format='{{.Exit}}' container_name

Question 14

An administrator needs to export container contents or create new images from containers. Which TWO commands accomplish these actions? (Choose TWO)

Accepted Answer

podman commit. podman export exports a container filesystem to a tarball, and podman commit creates an image from a container.

Answer

podman extract

Answer

podman push-container

Answer

podman save

Question 15

An administrator needs to manage multiple containers simultaneously using Podman. Which THREE actions can be performed directly using Podman commands? (Choose THREE)

Accepted Answer

Stop all running containers using 'podman stop $(podman ps -q)'.. Podman allows batch operations such as stopping all containers, starting all containers, or removing all stopped containers using pruning and filtering options.

Answer

Directly edit a running container's image tag using 'podman edit --tag'.

Answer

Instantly migrate a running container to a remote physical server using 'podman migrate'.