EX188 Practice Test 5 — 10 Questions

Question 1

An administrator needs to push a locally built Podman image named 'app:latest' to a remote container registry at 'registry.example.com/team'. Which command must be executed first to authenticate with the registry before pushing?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

podman login registry.example.com. The correct command is `podman login registry.example.com` because it authenticates the user to the specified container registry, storing credentials in the local authentication file (typically `${XDG_RUNTIME_DIR}/containers/auth.json`). This step is required before any push operation to a private registry, as it establishes the necessary session and permissions. Without a successful login, `podman push` would fail with an authentication error.

Answer

podman push --auth registry.example.com

Answer

podman auth registry.example.com

Answer

podman connect registry.example.com

Question 2

In a Podman Compose file, how do you define a custom network and connect a service to it?

Accepted Answer

Define networks at the root level and reference them under each service configuration.. In a Podman Compose file, custom networks are declared under a top-level networks: block, and each service references the desired network(s) under its own networks: key. This two-part structure is required by the Compose specification: the root-level declaration defines the network (driver, options, external flag), and the service-level reference attaches the service to it. This is how Compose wires services into shared networks for name resolution and isolation.

Answer

Use the 'links:' directive inside the service block exclusively.

Answer

Add a 'network_mode' string directly pointing to an external shell script.

Answer

Configure networking exclusively via command-line environment variables.

Question 3

An administrator needs to copy a directory named /app/logs from a running container named prod_app to the local host directory /var/backups/. Which command accomplishes this?

Accepted Answer

podman cp prod_app:/app/logs /var/backups/. 'podman cp' copies files or directories between a container and the host, using the 'container:path' syntax to disambiguate the container side. 'podman cp prod_app:/app/logs /var/backups/' copies the directory from the running container to the host. It works on running containers and preserves the source path semantics.

Answer

podman export --path /app/logs prod_app /var/backups/

Answer

podman pull prod_app:/app/logs /var/backups/

Answer

podman download prod_app:/app/logs /var/backups/

Question 4

An administrator wants to run a one-off command (/bin/sh) interactively inside an existing running container named legacy_app. Which command should be used?

Accepted Answer

podman exec -it legacy_app /bin/sh. podman exec -it legacy_app /bin/sh runs a new process inside the already-running container with an interactive TTY, which is exactly what is needed for a one-off interactive shell. The -i keeps stdin open and -t allocates a pseudo-TTY.

Answer

podman run -it legacy_app /bin/sh

Answer

podman enter legacy_app /bin/sh

Answer

podman attach legacy_app --shell=/bin/sh

Question 5

An administrator needs to copy files between the host system and a running container. Which TWO syntax forms or commands are correct when using podman cp? (Choose TWO)

Accepted Answer

podman cp container_name:/app/file.txt host_file.txt. Option D is correct because podman cp follows the same source-then-destination syntax as docker cp, so copying a host file into a running container is expressed as `podman cp host_file.txt container_name:/app/file.txt`, where the container path is prefixed with the container name and a colon. Option C is correct because the reverse direction uses the same syntax with the container path as the source: `podman cp container_name:/app/file.txt host_file.txt` copies the file out of the container onto the host. The remaining options are invalid because podman cp does not support a `--target` flag (A), a `--direction` flag (B), or a `--from` flag (E); direction is determined solely by which operand contains the `container:` prefix.

Answer

podman cp --target=container_name host_file.txt /app/file.txt

Answer

podman cp --direction=to-container host_file.txt container_name:/app/

Answer

podman cp --from=container_name /app/file.txt host_file.txt

Question 6

An administrator is using Podman Quadlets to manage containers via systemd. Where must the Quadlet .container configuration file be placed for system-wide root containers?

Accepted Answer

/etc/containers/systemd/. For system-wide root containers managed by Quadlets, the .container file must be placed in /etc/containers/systemd/. This directory is monitored by the podman-system-generator, which converts Quadlet files into systemd unit files at boot or on daemon-reload.

Answer

/etc/systemd/system/containers/

Answer

/var/lib/containers/systemd/quadlets/

Answer

/etc/systemd/system/

Question 7

You want to remove a custom Podman network named 'testnet', but it currently has active containers attached to it. What happens?

Accepted Answer

The deletion fails until all connected containers are stopped and disconnected.. Podman refuses to remove a network that has active containers attached to it; the deletion fails with an error indicating the network is in use. The administrator must first stop and disconnect all containers (or use podman network disconnect) before the network can be removed. This prevents silently breaking container connectivity and orphaned interfaces.

Answer

The network is removed, and the containers lose their network interface silently.

Answer

The containers are automatically disconnected and moved to the default bridge network.

Answer

The containers are automatically terminated and the network is removed.

Question 8

An administrator needs to execute multiple commands in a single RUN instruction to minimize image layers. Which syntax is standard in a Containerfile?

Accepted Answer

RUN dnf update -y && dnf install -y httpd. Combining commands using shell operators like && within a single RUN instruction reduces the total number of layers.

Answer

RUN ["dnf update -y", "dnf install -y httpd"]

Answer

RUN { dnf update -y; dnf install -y httpd; }

Answer

RUN dnf update -y 
 dnf install -y httpd

Question 9

Which environment file option can be used in a Podman Compose file to automatically load environment variables for service configuration?

Accepted Answer

env_file. In Podman Compose (and Docker Compose), the env_file key within a service definition specifies one or more files containing environment variables in KEY=VALUE format that are loaded into the container at runtime. This is the standard, documented way to inject environment variables from a file rather than listing them inline under environment:. Podman Compose implements this key for compatibility with the Compose specification.

Answer

environment_source

Answer

variables_file

Answer

load_env

Question 10

Which THREE statements correctly describe the differences between CMD and ENTRYPOINT in a Containerfile?

Accepted Answer

Combining ENTRYPOINT and CMD allows default arguments to be supplied while retaining override flexibility.. Option B is correct because when both ENTRYPOINT and CMD are used together, CMD supplies default arguments to the ENTRYPOINT executable, and those defaults can still be replaced by arguments passed at runtime to podman run. Option C is correct because ENTRYPOINT is specifically designed to set the image's main executable, making the container behave like a dedicated command such as /usr/bin/httpd or a custom application binary. Option D is correct because CMD provides defaults that are easily overridden: any arguments appended to podman run replace the CMD instruction entirely. Option A is incorrect because ENTRYPOINT can be overridden at runtime using podman run --entrypoint. Option E is incorrect because CMD and ENTRYPOINT serve different roles and have distinct syntax and behavior, especially regarding how runtime arguments interact with them.

Answer

ENTRYPOINT instructions cannot be overridden at runtime under any circumstances.

Answer

CMD and ENTRYPOINT perform identical functions with no syntactical differences.