EX188 Storage And Configuration Practice Test 4 — 15 Questions

Question 1

Which THREE inspection or cleanup actions can be performed on Podman secrets? (Choose THREE)

Accepted Answer

List existing secrets with 'podman secret ls'. Secrets can be listed, inspected for metadata, and removed.

Answer

Compile secrets into binary format with 'podman secret compile'

Answer

Edit secret values in-place with 'podman secret edit'

Question 2

Which THREE advanced features or driver options can be utilized when creating Podman named volumes with plugins or specialized drivers? (Choose THREE)

Accepted Answer

Custom volume drivers via the --driver flag. Named volumes support custom drivers, driver options via '--opt', and labels via '--label'.

Answer

Direct block device partitioning via --partition

Answer

Automatic kernel kernel-space memory locking via --mlock

Question 3

Which TWO conditions are required for a non-root (rootless) user to successfully bind mount a host directory into a container? (Choose TWO)

Accepted Answer

The user must have read/write access to the host directory on the host file system. Rootless users must have read/write permissions to the host path on the host filesystem and proper permissions/SELinux context.

Answer

Direct modification of the host kernel mount tables

Answer

Disabling user namespaces across the system

Answer

Root privileges on the host operating system

Question 4

An administrator needs to create a persistent storage volume that Podman can manage independently of any specific container lifecycle. Which command accomplishes this?

Accepted Answer

podman volume create mydata. The command podman volume create is used to provision a new managed volume in Podman's storage backend.

Answer

podman volume init mydata

Answer

podman storage volume-add mydata

Answer

podman create volume --name mydata

Question 5

A container needs read-only access to a host configuration directory located at /etc/appconfig. Which Podman volume flag configuration correctly achieves this?

Accepted Answer

--volume /etc/appconfig:/app/config:ro. Appending :ro to a volume mount specifier ensures the mount is read-only inside the container.

Answer

--volume /etc/appconfig:/app/config:readonly=true

Answer

--mount type=bind,src=/etc/appconfig,dst=/app/config,mode=ro

Answer

--volume /etc/appconfig:/app/config:readonly

Question 6

You are configuring a container to consume a Podman secret named db_password. By default, where within the container's file system will this secret be mounted if no destination path is specified?

Accepted Answer

/run/secrets/db_password. Podman secrets are mounted into the container under /run/secrets/ by default if an explicit target is not provided.

Answer

/secrets/db_password

Answer

/etc/secrets/db_password

Answer

/var/run/secrets/db_password

Question 7

An administrator runs a container with an SELinux-enforced host bind mount, but the container processes fail to write to the directory due to permission errors. Which volume option resolves this by sharing the SELinux content label?

Accepted Answer

--volume /host/data:/container/data:z. The :Z option instructs Podman to relabel the host path specifically for the container, while :z shares it across multiple containers.

Answer

--volume /host/data:/container/data:rprivate

Answer

--volume /host/data:/container/data:shared

Answer

--volume /host/data:/container/data:private

Question 8

You need to pass sensitive database credentials to a Podman container securely without storing them in plaintext environment variables. Which sequence of commands correctly creates and injects the secret?

Accepted Answer

podman secret create db_pass secret.txt && podman run --secret db_pass,type=mount,target=/run/secrets/pass myapp. Secrets must first be created via 'podman secret create' and then injected using the '--secret' flag during container creation.

Answer

podman volume create db_pass && podman run --volume db_pass:/run/secrets/pass myapp

Answer

podman secret create db_pass secret.txt && podman run --env-file secret.txt myapp

Answer

podman secret add db_pass secret.txt && podman run -e SECRET=db_pass myapp

Question 9

Which TWO actions can be performed using the podman volume management command suite? (Choose two.)

Accepted Answer

Display detailed low-level configuration of a volume using podman volume inspect. Podman volumes can be inspected and pruned using the volume subcommand suite.

Answer

Modify the size limit of an existing volume using podman volume resize

Answer

Encrypt a managed volume at rest using podman volume encrypt

Answer

Convert a bind mount to a named volume using podman volume convert

Question 10

A container using a named volume needs to be deleted, but you want to ensure the persistent volume data is preserved for future containers. Which command should you execute?

Accepted Answer

podman rm my_container. The standard podman rm command deletes the container, but volume data persists unless the -v or --rm --volumes flags are specified.

Answer

podman rm -v my_container

Answer

podman rm --volumes my_container

Answer

podman volume prune --associated my_container

Question 11

You have a file named config.env containing multiple KEY=VALUE pairs. Which flag allows you to load these configurations into a container as environment variables?

Accepted Answer

--env-file config.env. The --env-file flag parses a file line by line and passes the key-value pairs into the container as environment variables.

Answer

--config-file config.env

Answer

--volume config.env:/etc/env

Answer

--secret file=config.env

Question 12

Which TWO types of storage mechanisms are natively supported by Podman for container data persistence? (Choose two.)

Accepted Answer

Host bind mounts referencing directories on the host filesystem. Podman natively supports named managed volumes and host bind mounts.

Answer

Shared memory block devices via NFS exports

Answer

Direct Fibre Channel LUN mapping inside containers

Answer

Distributed HDFS cluster mounts

Question 13

You need to inspect the disk space usage and detailed metadata of all managed volumes currently configured in Podman. Which command provides this information?

Accepted Answer

podman volume inspect. The podman volume inspect command displays detailed metadata for one or more volumes.

Answer

podman storage inspect volumes

Answer

podman volume ls --details

Answer

podman system df

Question 14

An administrator is managing Podman secrets and needs to interact with the secret store. Which THREE commands or operations are valid when working with podman secret? (Choose three.)

Accepted Answer

podman secret ls. Podman secrets support creation, listing, inspection, and removal.

Answer

podman secret export

Answer

podman secret modify

Question 15

When configuring container mounts using the --mount flag, which THREE key-value pairs are valid parameters in the option string? (Choose three.)

Accepted Answer

destination. The --mount flag accepts options such as type, source (or src), and destination (or dst/target).

Answer

permission

Answer

owner