EX188 Multiple Select — 10 Questions

Question 1

Which THREE directives or practices are associated with implementing secure container builds and adhering to least-privilege principles? (Choose three.)

Accepted Answer

Using minimal, trusted base images to reduce the total software footprint and vulnerability surface.. Secure builds involve using non-root users, secure secret mounting, and trusted base images.

Answer

Hardcoding database passwords directly into ENV instructions so the application can read them easily.

Answer

Running all RUN instructions with '--privileged' inside the Containerfile.

Question 2

Which THREE statements accurately describe the differences between shell form and exec form for CMD and ENTRYPOINT instructions? (Choose three.)

Accepted Answer

Exec form ensures that Unix signals (such as SIGTERM) sent by Podman are received directly by the application process as PID 1.. Exec form uses JSON array syntax, avoids running a shell, and correctly passes signals as PID 1.

Answer

Shell form is mandatory when using multi-stage builds.

Answer

Exec form allows shell variable expansion (like $VAR) directly without needing explicit shell invocation.

Question 3

An administrator needs to inspect running containers and their resource consumption. Which TWO commands provide information about running container state or resource usage? (Choose TWO)

Accepted Answer

podman stats. podman ps lists containers, and podman stats displays live resource usage statistics.

Answer

podman storage

Answer

podman images

Answer

podman network ls

Question 4

A container named 'app_prod' is currently running, and an operator needs to troubleshoot its current configuration, network settings, and mounted volumes in detail. Which THREE commands or approaches can retrieve this information? (Choose THREE)

Accepted Answer

Run 'podman inspect app_prod' to output comprehensive JSON-formatted metadata regarding configuration, mounts, and network settings.. Podman provides several ways to inspect running containers, including 'podman inspect', 'podman port', and 'podman exec' / 'podman top'.

Answer

Run 'podman config app_prod' to print a summary of environment variables and limits.

Answer

Run 'podman diff app_prod' to view changes to the container's file system, which is primarily used for tracking modifications rather than initial configuration.

Question 5

An administrator is troubleshooting process execution and live configuration updates on a running container. Which TWO commands allow interacting with processes or updating resource limits on the fly? (Choose TWO)

Accepted Answer

podman update. podman top shows container processes, and podman update modifies container resources live.

Answer

podman exec-top

Answer

podman adjust

Answer

podman modify

Question 6

An administrator is configuring container health checks and wants to review health status or force immediate actions. Which TWO of the following statements or commands are accurate regarding Podman health checks? (Choose TWO)

Accepted Answer

podman inspect --format='{{json .State.Health.Status}}' can be used to check container health status.. podman inspect with health format templates can retrieve health status, and health checks can be defined at run time using --health-cmd.

Answer

Container health statuses are automatically logged to /var/log/podman-health.log on the host.

Answer

podman stop automatically triggers a health check before shutting down.

Answer

podman health-check status is a valid built-in standalone top-level command.

Question 7

An administrator needs to view logs or attach to a running container to troubleshoot an issue. Which TWO commands can be used to interact with container output streams? (Choose TWO)

Accepted Answer

podman attach. podman logs retrieves logged output, and podman attach connects to container input/output streams.

Answer

podman stream

Answer

podman view-logs

Answer

podman output

Question 8

An administrator needs to clean up stopped containers and unused data to reclaim disk space. Which TWO commands can be used to remove containers? (Choose TWO)

Accepted Answer

podman rm. podman rm removes specified containers, and podman container prune removes all stopped containers.

Answer

podman image prune

Answer

podman rmi

Answer

podman system clean

Question 9

An administrator wants to modify container settings or state. Which TWO of the following commands are valid Podman subcommands for container management? (Choose TWO)

Accepted Answer

podman restart. podman rename and podman restart are valid subcommands.

Answer

podman reconfigure

Answer

podman alter

Answer

podman modify

Question 10

An administrator is troubleshooting a misbehaving container and needs to examine its output logs and event history. Which TWO commands are appropriate for this task? (Choose TWO)

Accepted Answer

podman logs. podman logs retrieves container stdout/stderr, and podman events streams system-wide container events.

Answer

podman inspect-logs

Answer

podman history

Answer

podman trace