EX188 Practice Test 7 — 10 Questions

Question 1

A user needs to download an image from Docker Hub named 'library/alpine' using its explicit transport prefix. Which command demonstrates the correct transport syntax?

Accepted Answer

podman pull docker://alpine:latest. Podman supports explicit transport prefixes like docker://.

Answer

podman pull registry://alpine:latest

Answer

podman pull remote://alpine:latest

Answer

podman pull OCI://alpine:latest

Question 2

You need to copy local application source code from your build context into the /app directory inside the container image, automatically unpacking it if it is a local tar archive. Which instruction should you select?

Accepted Answer

ADD. The ADD instruction copies new files, directories, or remote file URLs from and adds them to the filesystem of the container at the path . A key feature distinguishing ADD from COPY is its ability to automatically extract local tar archives.

Answer

FETCH

Answer

TRANSFER

Answer

COPY

Question 3

An administrator is integrating Podman containers with systemd using generated unit files. Which TWO statements are correct regarding podman generate systemd and its usage? (Choose TWO)

Accepted Answer

The --new flag ensures that the generated service creates a new container instance upon starting rather than requiring a pre-existing static container.. podman generate systemd creates systemd unit files, and the --new flag ensures unit files create fresh containers on startup rather than relying on existing static container names.

Answer

Running systemctl daemon-reload is unnecessary after generating a unit file because Podman reloads systemd automatically.

Answer

Generated systemd files for rootless users must always be placed in /etc/systemd/system/.

Answer

Generated systemd unit files are executed exclusively by Docker daemon integration.

Question 4

An administrator wants to monitor real-time Podman system events, such as when containers are created, started, stopped, or removed, for auditing purposes. Which command should be executed?

Accepted Answer

podman events. The 'podman events' command streams real-time events from the Podman system.

Answer

podman audit

Answer

podman system stream

Answer

podman monitor

Question 5

An organization enforces that all container images must be signed using a local GPG key before they can be deployed in production. Which command generates a signature for an image stored in local storage using a specific signing key?

Accepted Answer

podman image sign --sign-by <key_id> registry.example.com/app:latest. 'podman image sign' is used to sign images for verification policies.

Answer

podman push --sign-by <key_id> app:latest

Answer

podman gpg --sign app:latest

Answer

podman sign --key <key_id> app:latest

Question 6

When configuring a secure private registry that uses a self-signed TLS certificate, a user receives an x509 certificate signed by an unknown authority error when pulling images. Where should the CA certificate file be placed on a RHEL system for system-wide trust?

Accepted Answer

/etc/containers/certs.d/registry.example.com/ca.crt. Custom CA certificates for registries are placed in /etc/containers/certs.d/<registry-name>/ or /etc/docker/certs.d/.

Answer

/etc/pki/ca-trust/source/anchors/registry.crt

Answer

/usr/share/pki/trust/anchors/ca.crt

Answer

~/.config/containers/certs.d/ca.crt

Question 7

An administrator wants to prevent users from pulling images from any registry except 'registry.access.redhat.com'. Where should this restriction be configured?

Accepted Answer

/etc/containers/registries.conf under 'unqualified-search-registries' and blocked registries lists. Registry blocking is configured in /etc/containers/registries.conf using the unqualified-search-registries or blocked registries directives.

Answer

/etc/containers/policy.json under 'default' block rules

Answer

/etc/containers/storage.conf under 'block-pull'

Answer

~/.config/containers/access.conf

Question 8

An administrator wants to inspect the container storage configuration settings, such as graph root and storage driver, on a RHEL system. Which configuration file should they examine?

Accepted Answer

/etc/containers/storage.conf. Storage settings for containers are defined in /etc/containers/storage.conf.

Answer

/etc/containers/podman.conf

Answer

/etc/containers/registries.conf

Answer

/etc/sysconfig/docker

Question 9

An administrator wants to check container port mappings and process listings inside containers. Which TWO commands provide these insights? (Choose TWO)

Accepted Answer

podman port. podman port shows port mappings and podman top shows running processes.

Answer

podman ps-ports

Answer

podman processes

Answer

podman netstat

Question 10

You are designing a container image that runs an executable web server. You want to provide default arguments to the executable that can be easily overridden by a user passing arguments directly to 'podman run'. Which instruction combination is best?

Accepted Answer

Use ENTRYPOINT for the binary and CMD for the default arguments.. ENTRYPOINT should define the executable, and CMD should define the default parameters that can be overridden easily when running the container.

Answer

Use ENV for the binary and WORKDIR for the arguments.

Answer

Use RUN for both the binary and the arguments.

Answer

Use CMD for the binary and ENTRYPOINT for the default arguments.