EX188 Storage And Configuration Practice Test 3 — 15 Questions

Question 1

An engineer needs to mount a host directory using the advanced '--mount' syntax instead of '-v'. Which syntax correctly specifies a bind mount?

Accepted Answer

podman run --mount type=bind,source=/host/path,destination=/container/path myapp. The advanced --mount syntax uses comma-separated key=value pairs, and for a bind mount you must specify type=bind, source=, destination=. Option D is the only one that follows this exact syntax.

Answer

podman run --mount /host/path:/container/path:bind myapp

Answer

podman run --mount source=/host/path,target=/container/path myapp

Answer

podman run --mount bind:/host/path:/container/path myapp

Question 2

When configuring an environment file for use with '--env-file', how are comment lines designated?

Accepted Answer

Using '#' at the beginning of the line. In an environment file used with --env-file, comment lines are designated with a '#' at the beginning of the line. Podman (and Docker) parse these files line by line, treating lines starting with # as comments and ignoring them. This matches common shell-style and .env file conventions.

Answer

Using '//' at the beginning of the line

Answer

Using ';' at the beginning of the line

Answer

Using '/* ... */' block syntax

Question 3

Which subcommand deletes one or more specific named volumes?

Accepted Answer

podman volume rm. The correct subcommand to delete one or more named volumes is podman volume rm. This command removes the specified volumes from the system.

Answer

podman volume drop

Answer

podman volume delete

Answer

podman rm volume

Question 4

An administrator needs to pass a single environment variable directly on the command line when starting a container. Which flag accomplishes this?

Accepted Answer

podman run -e DB_HOST=localhost myapp. The -e flag (or --env) in podman run sets an environment variable inside the container. The syntax podman run -e DB_HOST=localhost myapp passes DB_HOST=localhost to the container's environment. This is the standard and correct way to inject a single environment variable on the command line.

Answer

podman run --set-env DB_HOST=localhost myapp

Answer

podman run -v DB_HOST=localhost myapp

Answer

podman run --variable DB_HOST=localhost myapp

Question 5

An application requires a secret to be exposed as an environment variable inside the container instead of a file mount. Which option achieves this with '--secret'?

Accepted Answer

podman run --secret db_pwd,type=env myapp. Podman's --secret flag supports a type= option, and type=env exposes the secret as an environment variable inside the container rather than mounting it as a file under /run/secrets. The syntax --secret db_pwd,type=env is the documented form for this behavior. This is useful for applications that read credentials from environment variables (e.g., 12-factor apps) instead of files.

Answer

podman run --secret db_pwd,destination=env myapp

Answer

podman run --secret db_pwd,target=variable myapp

Answer

podman run --secret db_pwd,mode=environment myapp

Question 6

What type of storage pattern is used by default when a container writes logs and temporary application state directly to its writable layer without any volumes attached?

Accepted Answer

Ephemeral container storage. When a container writes logs or temporary state to its writable layer without any volume attached, that data is stored in the container's ephemeral writable layer. This storage is tied to the container's lifecycle and is lost when the container is removed, making it ephemeral. It is not persistent, not a bind mount, and not replicated block storage.

Answer

Persistent named storage

Answer

Bind mount storage

Answer

Block storage replication

Question 7

An administrator needs to create a Podman secret from a file on disk named 'secret.txt'. Which command correctly performs this action?

Accepted Answer

podman secret create db_secret secret.txt. The correct syntax for creating a Podman secret from a file is `podman secret create `. Podman's secret subcommand mirrors Docker's `docker secret create` syntax, where the secret name comes first and the source file (or `-` for stdin) comes second. This command reads the file contents and stores them in Podman's secret store, making them available to containers via `--secret`.

Answer

podman secret import db_secret secret.txt

Answer

podman create secret db_secret secret.txt

Answer

podman secret add db_secret --file secret.txt

Question 8

Which flag can be passed to 'podman run' to automatically remove the container and its anonymous volumes upon exit?

Accepted Answer

podman run --rm. The --rm flag in podman run tells Podman to automatically remove the container and its anonymous volumes when the container exits. This is equivalent to the --rm flag in Docker and is commonly used for ephemeral containers. It helps keep the system clean by removing stopped containers and their associated anonymous volumes.

Answer

podman run --delete-on-exit

Answer

podman run --clean

Answer

podman run --purge

Question 9

An administrator wants to bind mount a host file directly into a container as a configuration file. Is this supported in Podman?

Accepted Answer

Yes, Podman supports bind mounting individual files from the host.. Podman supports bind mounting individual files from the host into a container using the -v or --mount flag, e.g., `podman run -v /host/config.conf:/etc/config.conf:Z`. This is a standard OCI runtime feature and is fully supported.

Answer

No, bind mounts are restricted to named volumes only.

Answer

No, Podman only supports bind mounting entire directories.

Answer

Yes, but only if the file is located inside /var/lib/containers.

Question 10

An administrator needs to create a temporary filesystem mount stored purely in host memory for high-performance temporary data inside a container. Which mount type should be used?

Accepted Answer

podman run --tmpfs /app/cache myapp. The --tmpfs flag in podman run mounts a tmpfs filesystem at the specified container path, backed entirely by host memory (and swap if enabled). This is the standard, documented way to provide high-performance ephemeral storage inside a container. tmpfs contents are lost when the container stops, which matches the 'temporary' requirement.

Answer

podman run --ramdisk /app/cache myapp

Answer

podman run --mount type=memory,destination=/app/cache myapp

Answer

podman run --memory-mount /app/cache myapp

Question 11

An administrator wants to ensure that a bind-mounted directory allows propagation of mounts from the host into the container. Which mount option configures mount propagation mode?

Accepted Answer

podman run -v /host/dir:/container/dir:shared myapp. The :shared mount option on a bind mount configures mount propagation mode to shared, allowing mounts performed on the host to propagate into the container (and vice versa). The syntax is -v /host/dir:/container/dir:shared, where shared is the propagation mode keyword.

Answer

podman run -v /host/dir:/container/dir:mtype=shared myapp

Answer

podman run -v /host/dir:/container/dir:sync myapp

Answer

podman run -v /host/dir:/container/dir:propagate myapp

Question 12

Which command displays disk space usage statistics for Podman storage, including volumes and containers?

Accepted Answer

podman system df. The correct command is `podman system df`. This command provides a summary of disk space usage for Podman's storage, including images, containers, and volumes. It is analogous to `docker system df` and is the standard way to inspect storage consumption in Podman.

Answer

podman disk status

Answer

podman volume df

Answer

podman storage usage

Question 13

Which TWO commands or flags are valid for managing Podman named volumes? (Choose TWO)

Accepted Answer

podman volume create. Option D, 'podman volume create', is correct because it is the actual Podman subcommand used to create a named volume, which can then be referenced by containers via the -v or --mount flag. Option E, 'podman volume ls', is correct because it lists all existing named volumes along with their driver and mountpoint, making it a valid management command. The other options do not belong: 'podman volume make' (A), 'podman volume compile' (B), and 'podman volume build' (C) are not real Podman subcommands and would return an unknown command error, since Podman's volume management verbs are create, ls, inspect, rm, and prune.

Answer

podman volume make

Answer

podman volume compile

Answer

podman volume build

Question 14

Which THREE of the following are valid options or flags when working with Podman secrets? (Choose THREE)

Accepted Answer

podman secret rm. Option B, `podman secret rm`, is a valid Podman subcommand used to remove one or more existing secrets from Podman's secret store, so it correctly belongs to the `podman secret` command family. Option C, `podman secret ls`, is also valid because it lists all secrets currently managed by Podman, optionally with formatting or filtering flags. Option E, `podman secret create`, is valid as the primary command for creating a new secret from a file or standard input, which is the core operation for Podman secrets. The unmarked options do not belong: `podman secret extract` (A) is not a Podman secret subcommand, and `podman secret compile` (D) is likewise not a recognized Podman secret operation.

Answer

podman secret extract

Answer

podman secret compile

Question 15

Which THREE storage-related items can be inspected using 'podman system df'? (Choose THREE)

Accepted Answer

Images. The 'podman system df' command reports disk usage for the storage-related resources that Podman manages, and its output lists Images (B), Containers (C), and Volumes (D) with their total, active, and reclaimable sizes. Images (B) are included because Podman tracks the space consumed by locally stored image layers and their shared parents. Containers (C) are included because each container's writable layer occupies storage on disk. Volumes (D) are included because named volumes persist data outside the container layer and their disk consumption is reported. Networks (A) and Secrets (E) are not storage-usage items reported by 'podman system df'; networks are runtime/network configuration and secrets are managed credential objects, neither of which appears in this command's output.

Answer

Networks

Answer

Secrets