Which flag is used with 'podman run' to create an ephemeral, writable container layer scratchpad that is automatically destroyed when the container stops?
A container needs to read a secret named 'api_key' injected as a file at '/run/secrets/api_key'. What is the default destination path inside the container when mounting a secret without specifying a target?
A rootless Podman container needs to access a host directory. Due to user namespace mapping, file ownership appears different inside the container. Which flag can be added to the mount to adjust UID/GID mapping behavior if supported?
An engineer needs to inspect the content and metadata of an existing Podman secret named 'my_secret' without outputting the raw secret value in plain text if masked, or viewing its metadata. Which command inspects the secret?
A container needs read-only access to a host configuration directory located at /etc/appconfig. Which Podman volume flag configuration correctly achieves this?
An administrator runs a container with an SELinux-enforced host bind mount, but the container processes fail to write to the directory due to permission errors. Which volume option resolves this by sharing the SELinux content label?
A container using a named volume needs to be deleted, but you want to ensure the persistent volume data is preserved for future containers. Which command should you execute?
You need to inspect the disk space usage and detailed metadata of all managed volumes currently configured in Podman. Which command provides this information?
An administrator is managing Podman secrets and needs to interact with the secret store. Which THREE commands or operations are valid when working with podman secret? (Choose three.)
A developer runs a rootless Podman container that writes application logs to /var/log/app inside the container. They want these logs to persist on the host at /home/dev/logs and be accessible even if the container is removed. Which command correctly achieves this using a bind mount?
An administrator runs a container with a SELinux-relabeled host directory mount using the Z option, but multiple containers need to share write access to this exact same volume. Which option should be used instead?
An engineer needs to inspect the low-level configuration details, mount points, and driver options of a named volume named 'app_vol'. Which command provides this information in JSON format?
A developer wants to mount a host directory into a container with read-only permissions to prevent accidental data modification. Which volume option flag achieves this?
An administrator needs to create a persistent storage area managed completely by Podman that does not rely on a specific host directory path. Which command should be used?
An application container requires multiple configuration variables defined in a local file named 'app.env'. Which flag loads these variables into the container environment?
An administrator wants to create a named volume using a specific volume driver instead of the default local driver. Which flag should be used with 'podman volume create'?
An application requires a secret to be exposed as an environment variable inside the container instead of a file mount. Which option achieves this with '--secret'?
What type of storage pattern is used by default when a container writes logs and temporary application state directly to its writable layer without any volumes attached?
An administrator needs to create a temporary filesystem mount stored purely in host memory for high-performance temporary data inside a container. Which mount type should be used?
An administrator wants to ensure that a bind-mounted directory allows propagation of mounts from the host into the container. Which mount option configures mount propagation mode?
An administrator needs to create a persistent storage volume that Podman can manage independently of any specific container lifecycle. Which command accomplishes this?
You are configuring a container to consume a Podman secret named db_password. By default, where within the container's file system will this secret be mounted if no destination path is specified?
You need to pass sensitive database credentials to a Podman container securely without storing them in plaintext environment variables. Which sequence of commands correctly creates and injects the secret?
You have a file named config.env containing multiple KEY=VALUE pairs. Which flag allows you to load these configurations into a container as environment variables?
An administrator needs to pass a configuration file located at /etc/myapp/config.yml on the host into a container at the same path. The container should read the file but not modify it. Which Podman run option accomplishes this with minimal risk of accidental modification?
An administrator needs to run a PostgreSQL container that stores its database files in a Podman named volume called pgdata, which was created earlier. The container must also have the volume mounted at /var/lib/postgresql/data inside the container. Which command should the administrator use?
A developer needs to pass several environment variables to a container from a file named web.env. The file contains lines such as DB_HOST=localhost and DB_PORT=5432. Which Podman run flag should be used to load these variables into the container?
An administrator is troubleshooting a rootless Podman container that fails to write to a bind-mounted host directory. The directory is owned by the user on the host, but inside the container, the process runs as UID 1000 and receives permission denied. Which action should the administrator take to resolve the issue?
An administrator wants to create a named volume called appdata and inspect its mount point on the host. Which sequence of commands should the administrator use?
An administrator is preparing a Podman container that requires persistent storage for a web application. The storage must survive container restarts and be easily backed up. Which two types of storage mechanisms should the administrator consider? (Choose two.)