EX188 Practice Test 3 — 10 Questions

Question 1

Which TWO actions can be performed using the 'podman network' subcommand? (Choose two.)

Accepted Answer

ls. Option C (ls) is correct because 'podman network ls' lists all the container networks configured on the system, which is a core function of the 'podman network' subcommand. Option E (rm) is correct because 'podman network rm' removes one or more specified networks, another valid operation under the 'podman network' subcommand. The unmarked options do not belong: 'start' (A) is used with containers (e.g., 'podman start'), not networks; 'build' (B) is used to build images (e.g., 'podman build'), not networks; and 'commit' (D) creates an image from a container's changes (e.g., 'podman commit'), which is unrelated to network management.

Answer

start

Answer

build

Answer

commit

Question 2

You need to completely remove a custom user-defined bridge network named 'test-net' that has no active containers attached to it. Which command performs this action?

Accepted Answer

podman network rm test-net. 'podman network rm test-net' removes the specified user-defined network. Since the network has no active containers attached, the removal succeeds immediately; if containers were attached, Podman would refuse unless forced. This is the direct, correct command for deleting a named network.

Answer

podman network prune --force

Answer

podman rm network test-net

Answer

podman network delete test-net

Question 3

Which command removes all unused Podman networks that are not currently connected to any containers?

Accepted Answer

podman network prune. 'podman network prune' deletes unused networks.

Answer

podman network clean

Answer

podman network rm --unused

Answer

podman prune networks

Question 4

When generating a Kubernetes Pod YAML from a Podman container using 'podman generate kubernetes', how are published ports mapped into the resulting Kubernetes manifest?

Accepted Answer

They are translated into container port definitions within the containers spec array.. When generating a Kubernetes Pod YAML from a Podman container, published ports are translated into containerPort entries within the containers spec array. This reflects the container's exposed ports in the Kubernetes manifest, allowing the Pod to declare which ports it listens on.

Answer

They are converted into host-level iptables rules embedded in annotations.

Answer

They are ignored entirely and must be added manually.

Answer

They cause the generation command to fail with a port conflict error.

Question 5

A user running a rootless container needs to inspect which subordinate UID and GID ranges have been allocated to their user account on the RHEL 9 host. Which files define these mappings?

Accepted Answer

/etc/subuid and /etc/subgid. The /etc/subuid and /etc/subgid files define the subordinate UID and GID ranges allocated to each user for rootless container mapping. Each line is user:start:count, and Podman reads these to build the user namespace mappings. Inspecting them shows exactly which host UIDs/GIDs the user's containers can use.

Answer

/etc/passwd and /etc/group

Answer

/etc/security/limits.conf

Answer

~/.config/containers/storage.conf

Question 6

An operator wants to create a custom user-defined bridge network named 'app-net' with a specific subnet of '192.168.100.0/24' using Podman. Which command is correct?

Accepted Answer

podman network create --subnet 192.168.100.0/24 app-net. 'podman network create --subnet 192.168.100.0/24 app-net' is the correct syntax: the '--subnet' flag specifies the CIDR, and the network name follows as the positional argument. This creates a user-defined bridge network with the specified subnet.

Answer

podman bridge create app-net --subnet 192.168.100.0/24

Answer

podman create network --ip 192.168.100.0/24 app-net

Answer

podman network new --subnet=192.168.100.0/24 app-net

Question 7

You need to configure container DNS servers explicitly when running a container, overriding the host's /etc/resolv.conf settings. Which Podman flag do you use?

Accepted Answer

--dns 8.8.8.8. The '--dns' flag on 'podman run' explicitly sets the DNS server(s) inside the container's /etc/resolv.conf, overriding what would otherwise be inherited from the host. Passing '--dns 8.8.8.8' makes the container use Google's public resolver for name lookups, regardless of the host's resolver configuration.

Answer

--resolv-conf custom

Answer

--nameserver 8.8.8.8

Answer

--dns-search 8.8.8.8

Question 8

By default, podman build executes build instructions using the root user. You want to switch the execution context to a non-privileged user named 'appuser' for all subsequent RUN, CMD, and ENTRYPOINT instructions. Which instruction should you use?

Accepted Answer

USER. The USER instruction in a Containerfile sets the UID (and optionally GID) that subsequent RUN, CMD, and ENTRYPOINT instructions execute as, and it also sets the default user for the running container. Placing USER appuser before the relevant instructions switches the execution context to that non-privileged account.

Answer

LOGIN

Answer

SU

Answer

ACCOUNT

Question 9

An administrator needs to view all network ports exposed or mapped by a container named web_prod using a simplified summary command. Which command can be used?

Accepted Answer

podman port web_prod. podman port is the dedicated subcommand that prints the port mappings (published and exposed) for a container in a compact, human-readable summary format. It mirrors docker port and is the intended tool when you want a quick listing rather than the full JSON dump from podman inspect.

Answer

podman show-ports web_prod

Answer

podman network list-ports web_prod

Answer

podman inspect --ports web_prod

Question 10

How do you check the logs of all services managed by a Podman Compose file?

Accepted Answer

podman-compose logs. 'podman-compose logs' displays log output from all services defined in the compose file.

Answer

podman-compose monitor

Answer

podman-compose output

Answer

podman logs --compose