EX188 Practice Test 5 — 10 Questions

Question 1

An administrator needs to configure system-wide registry search shortcuts so that developers can run 'podman pull rhel9' and Podman automatically expands it to 'registry.access.redhat.com/rhel9'. Which configuration file and parameter accomplish this?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

/etc/containers/registries.conf using the unqualified-search-registries parameter. Unqualified search registries are configured in /etc/containers/registries.conf using the unqualified-search-registries array parameter.

Answer

/etc/sysconfig/podman using the SEARCH_REGISTRIES variable

Answer

/etc/containers/registries.d/default.yaml using the search-domains parameter

Answer

~/.config/containers/auth.json using the default-registry key

Question 2

An administrator needs to pause all processes inside a running container named db_master without stopping it. Which command accomplishes this?

Accepted Answer

podman pause db_master. podman pause suspends all processes in the specified container.

Answer

podman suspend db_master

Answer

podman freeze db_master

Answer

podman hold db_master

Question 3

You are optimizing a Containerfile using multi-stage builds to minimize image size. What is the key advantage of a multi-stage build in Podman?

Accepted Answer

It allows you to copy only finalized artifacts from a heavy build stage into a minimal production stage.. Multi-stage builds allow you to use multiple FROM instructions in a single Containerfile. Each FROM instruction starts a new stage with a different base, and you can copy artifacts from previous stages into the final stage, leaving behind build tools, compilers, and SDKs.

Answer

It automatically converts Dockerfiles into systemd service units.

Answer

It enables building container images concurrently across multiple remote container registries.

Answer

It eliminates the need for caching layers during the podman build process.

Question 4

When creating multi-architecture container images using podman build, how can you ensure that architecture-specific binaries are correctly handled when using instructions like COPY?

Accepted Answer

By running podman build separately for each architecture and combining them with podman manifest.. Podman supports building for multiple architectures using buildah/podman features, where TARGETPLATFORM, TARGETOS, and TARGETARCH build args are automatically available.

Answer

By setting the ARCH environment variable in the base image.

Answer

By manually editing the Containerfile to include architecture-specific IF/ELSE statements.

Question 5

A security team requires that all container processes run with a specific SELinux type instead of the default container_t. How can an administrator specify a custom SELinux type when launching a container with 'podman run'?

Accepted Answer

--security-opt label=type:custom_t. The '--security-opt' flag can be used to set custom SELinux labels (e.g., label=type:custom_t).

Answer

--selinux-type custom_t

Answer

--cap-add SELINUX

Answer

--env SELINUX_TYPE=custom_t

Question 6

Which TWO commands display information about container images present in local Podman storage? (Choose two.)

Accepted Answer

podman image inspect. 'podman images' and 'podman image inspect' display local image information.

Answer

podman container list

Answer

podman ps

Answer

podman volume ls

Question 7

An administrator needs to run a container that requires access to the host's network stack directly, bypassing network isolation. Which flag should be passed to 'podman run'?

Accepted Answer

--network host. Passing '--net=host' or '--network=host' disables network namespace isolation.

Answer

--share network

Answer

--privileged

Answer

--net bridge

Question 8

An administrator wants to immediately stop and remove a running container named temp_test in a single command. Which command should be used?

Accepted Answer

podman rm -f temp_test. The --rm flag with run automatically removes containers upon exit, but to remove an existing running container immediately, podman rm with -f can be used.

Answer

podman kill --remove temp_test

Answer

podman delete --force temp_test

Answer

podman stop --rm temp_test

Question 9

An administrator wants to view real-time container lifecycle events across the entire Podman system, such as container creation, starting, and stopping. Which command should be executed?

Accepted Answer

podman events. The podman events command monitors container events in real time.

Answer

podman monitor --stream

Answer

podman logs --follow --events

Answer

podman system trace

Question 10

An administrator needs to update the CPU shares (cpu-shares) of a running container named compute_job on the fly without stopping it. Which command should be used?

Accepted Answer

podman update --cpu-shares 512 compute_job. podman update modifies container configuration resources on a running container.

Answer

podman config compute_job cpu-shares=512

Answer

podman modify --cpu-shares 512 compute_job

Answer

podman set --shares=512 compute_job