EX200 Manage containers — All Questions With Answers

Question 1mediummultiple choice

Read the full Manage containers explanation →

A developer reports that a container running a custom web application is failing to start on a Red Hat Enterprise Linux 8 host. The container image is built from a Dockerfile that uses 'EXPOSE 8080'. The host firewall is enabled. Which action is most likely required to allow external access to the application?

Question 2hardmultiple choice

Read the full Manage containers explanation →

An administrator needs to ensure that a container always runs with a specific SELinux context for security reasons. The container uses a volume mount from the host. Which command should be used to start the container?

Question 3easymultiple choice

Read the full Manage containers explanation →

A system administrator wants to run a container that uses the rootless mode available in Podman. Which requirement must be met for rootless containers to work correctly?

Question 4hardmultiple choice

Read the full Manage containers explanation →

A container running a database service needs to persist data across restarts. The administrator decides to use a named volume. Which command creates a named volume and mounts it correctly?

Question 5mediummulti select

Read the full Manage containers explanation →

Which TWO statements are true regarding container images and containers in Podman?

Question 6hardmulti select

Read the full Manage containers explanation →

Which THREE actions are required to enable a non-root user to run containers using Podman on Red Hat Enterprise Linux 8?

Question 7mediummultiple choice

Read the full Manage containers explanation →

Refer to the exhibit. A user attempts to start a new container named 'web3' but receives an error. The user wants to reuse the name 'web3'. Which command should be run first to resolve the issue?

Network Topology

Question 8hardmultiple choice

Read the full Manage containers explanation →

An administrator is tasked with deploying a containerized application on a Red Hat Enterprise Linux 8 server that is part of a high-security environment. The application must run as a non-root user inside the container. The container image is based on Red Hat Universal Base Image (UBI) and exposes port 443 for HTTPS. The administrator needs to ensure that the container can be restarted automatically if it crashes and that the application logs are persisted on the host in /var/log/app. The application requires a configuration file that is generated dynamically at startup and must be accessible to the container. The administrator has created a systemd service file for the container but wants to use Podman's built-in features to manage the container. Which approach meets all requirements?

Question 9mediummultiple choice

Read the full Manage containers explanation →

A system administrator needs to run a container that remains running in the background and executes a web server. Which podman command will correctly run the container detached and map host port 8080 to container port 80?

Question 10hardmulti select

Read the full Manage containers explanation →

A containerized application requires persistent storage and must be able to run with SELinux enforcing. The administrator runs a container with the volume mount: `podman run -v /host/data:/container/data:Z myimage`. Which TWO statements are true about this configuration?

Question 11easymultiple choice

Read the full Manage containers explanation →

A container named 'web1' was created and ran briefly before exiting with status 0. The administrator needs to restart it and attach to the running container's console. Which command should be used?

Network Topology

Question 12mediumdrag order

Read the full Manage containers explanation →

Put the steps to configure NFS server to export /nfsshare to a specific client in order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Question 13mediummatching

Read the full Manage containers explanation →

Match each log file to its typical content.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

General system log (most non-critical messages)

Authentication and security events

Audit records from auditd

Cron job execution logs

Question 14easymultiple choice

Read the full Manage containers explanation →

A user wants to run a container that will restart automatically unless explicitly stopped by the administrator. Which podman run option should be used?

Question 15easymultiple choice

Read the full Manage containers explanation →

An administrator needs to list all container images stored locally, including intermediate layers. Which command should be used?

Question 16easymultiple choice

Read the full Manage containers explanation →

A container fails to start because the port it needs is already in use. Which command can the administrator use to identify the process using the port?

Question 17mediummultiple choice

Read the full Manage containers explanation →

A team wants to run a container as a non-root user inside the container for security. Which instruction should be included in the Containerfile?

Question 18mediummultiple choice

Read the full Manage containers explanation →

An administrator needs to pass environment variables from the host to a container without exposing them in the command line. Which method should be used?

Question 19mediummultiple choice

Read the full Manage containers explanation →

A containerized web server needs to persist logs outside the container. Which podman run option allows the administrator to specify a bind mount with mount propagation options?

Question 20hardmultiple choice

Read the full Manage containers explanation →

A database container crashes repeatedly. The administrator wants to see the last 10 lines of the container's logs before it exited. Which command should be used?

Question 21hardmultiple choice

Read the full Manage containers explanation →

An administrator is building a container image with a Containerfile. They want to ensure that a specific RUN command always executes without using the build cache. Which build option should they use?

Question 22hardmultiple choice

Read the full Manage containers explanation →

A container needs to share the host's network namespace for performance monitoring. Which podman run option achieves this?

Question 23easymulti select

Read the full Manage containers explanation →

Which TWO options to podman run can be used to persist data outside the container? (Select exactly two.)

Question 24mediummulti select

Read the full Manage containers explanation →

Which THREE options to podman run can be used to publish container ports to the host? (Select exactly three.)

Question 25hardmulti select

Read the full Manage containers explanation →

A container is running but cannot be accessed from the network. Which TWO commands could help diagnose the issue? (Select exactly two.)

Question 26easymultiple choice

Read the full Manage containers explanation →

Based on the exhibit, which command should be used to start the container named 'mycontainer'?

Exhibit

Refer to the exhibit.

$ podman ps -a
CONTAINER ID  IMAGE                           COMMAND               CREATED         STATUS                     PORTS       NAMES
a1b2c3d4e5f6  registry.access.redhat.com/ubi8/ubi  "/bin/bash"          5 minutes ago   Exited (0) 3 minutes ago              mycontainer
z9y8x7w6v5u4  do280/httpd                      "/usr/sbin/httpd -D"  2 hours ago     Up 2 hours                 0.0.0.0:80->80/tcp  webserver

Question 27mediummultiple choice

Read the full Manage containers explanation →

Based on the exhibit, which statement about the container 'webserver' is true?

Exhibit

Refer to the exhibit.

$ podman inspect webserver | grep -A5 '"Ports"'
"Ports": {
    "80/tcp": [
        {
            "HostPort": "8080"
        }
    ]
}

Question 28hardmultiple choice

Read the full Manage containers explanation →

Based on the exhibit, what is the most likely cause of the error?

Network Topology

Question 29easymultiple choice

Read the full Manage containers explanation →

An administrator needs to run a container with a bind mount of the host directory /data to /var/lib/data inside the container. The container image is web:latest. Which command correctly achieves this?

Question 30mediummultiple choice

Read the full Manage containers explanation →

A container running a web server exits immediately after starting. The administrator runs 'podman logs <container>' and sees 'Error: listen tcp :80: bind: address already in use'. What is the most likely cause and solution?

Question 31hardmultiple choice

Read the full Manage containers explanation →

A system administrator wants to run a container as a systemd service that restarts automatically after a system reboot. Which approach follows Red Hat best practices?

Question 32easymultiple choice

Read the full Manage containers explanation →

An administrator needs to pull a container image from a private registry at registry.example.com:5000. The registry requires authentication. Which command should be used first?

Question 33mediummultiple choice

Read the full Manage containers explanation →

A containerized application writes logs to stdout. The administrator wants to view only the last 50 lines of logs from a container named 'app1'. Which command accomplishes this?

Question 34hardmultiple choice

Read the full Manage containers explanation →

An administrator creates a pod named 'webpod' containing two containers: 'nginx' and 'logger'. The goal is for the nginx container to access the logger container via hostname 'logger'. Which network configuration is required?

Question 35easymultiple choice

Read the full Manage containers explanation →

Which file should be present in a directory to build a container image using 'podman build'?

Question 36mediummultiple choice

Read the full Manage containers explanation →

An administrator wants to run a container with --user 1001:1001 to avoid running as root. After starting, the container cannot write to a bind-mounted directory owned by root. What is the best practice to allow write access?

Question 37hardmultiple choice

Read the full Manage containers explanation →

A container exits immediately with status 1. The administrator runs 'podman logs container' but sees no output. What is the most likely reason for the missing logs?

Question 38easymulti select

Read the full Manage containers explanation →

Which TWO options correctly describe the use of 'podman exec'? (Choose TWO.)

Question 39mediummulti select

Read the full Manage containers explanation →

Which THREE statements about container storage in podman are correct? (Choose THREE.)

Question 40hardmulti select

Read the full Manage containers explanation →

Which TWO commands show detailed information about a container image, including layers and configuration? (Choose TWO.)

Question 41hardmultiple choice

Read the full Manage containers explanation →

A company runs a critical web application in a container on a Red Hat Enterprise Linux 9 server. The container is started via a systemd service called 'webapp.service'. The service unit file was generated using 'podman generate systemd --new --name webapp'. Recently, after a kernel update and reboot, the service fails to start the container. The administrator runs 'systemctl status webapp.service' and sees 'Active: failed (Result: exit-code)' and 'Process: 1234 ExecStart=/usr/bin/podman run ... (code=exited, status=125)'. The administrator also checks 'journalctl -u webapp.service' and sees: 'Error: unable to start container: container create failed: OCI runtime error: container_linux.go:380: starting container process caused: exec: "/usr/bin/app.sh": stat /usr/bin/app.sh: no such file or directory'. The container image was built locally using a Containerfile that includes 'COPY app.sh /usr/bin/app.sh'. The administrator verifies the image is present locally. What should the administrator do to resolve this issue?

Question 42easymultiple choice

Read the full Manage containers explanation →

A DevOps engineer needs to run a container that stores persistent data in a location managed by Podman, ensuring the data survives container removal and can be easily backed up. Which approach should the engineer use?

Question 43hardmultiple choice

Read the full Manage containers explanation →

A system administrator is troubleshooting a container that fails to start with the error: 'Error: cannot start container: listen tcp4 :80: bind: address already in use'. The container is intended to serve HTTP traffic on port 80. What is the most appropriate first step to resolve this issue?

Question 44mediummulti select

Read the full Manage containers explanation →

Refer to the exhibit. A developer created this Containerfile to build a custom web server image. The build fails. Which TWO changes are necessary to make the Containerfile correct and allow the build to succeed?

Exhibit

FROM registry.access.redhat.com/ubi8/ubi
RUN yum install -y httpd
COPY index.html /var/www/html/
CMD ["/usr/sbin/httpd", "-D", "FOREGROUND"]

Question 45easymultiple choice

Read the full Manage containers explanation →

A developer is running Podman as a non-root user on a Red Hat Enterprise Linux 8 system. The developer successfully runs a container, but notices that after logging out of the SSH session, the container stops. The developer wants the container to continue running even after disconnecting from the SSH session. The container is a simple web server that listens on port 8080. The developer has already enabled lingering for the user account using 'loginctl enable-linger'. However, the container still stops upon logout. What additional step should the developer take to ensure the container persists after logout?

Question 46mediummultiple choice

Read the full Manage containers explanation →

An administrator creates a Podman pod named 'webpod' and adds two containers: 'webserver' and 'database'. Both containers are added using 'podman pod create --name webpod' followed by 'podman run --pod webpod --name webserver nginx' and 'podman run --pod webpod --name database postgres'. The administrator wants the webserver container to be able to reach the database container by the hostname 'database'. However, when the administrator executes 'podman exec webserver ping database', the ping fails with 'ping: database: Name or service not known'. Which of the following is the most likely cause and correct solution?

Question 47hardmultiple choice

Read the full Manage containers explanation →

A production server running Red Hat Enterprise Linux 9 hosts multiple Podman containers. The system administrator wants to ensure that a critical container named 'payments' automatically starts when the host boots, even if no user is logged in. The administrator has already created a systemd service file at /etc/systemd/system/container-payments.service. The service file contains: [Unit] Description=Payments container [Service] ExecStart=/usr/bin/podman start -a payments ExecStop=/usr/bin/podman stop payments Type=forking Restart=always [Install] WantedBy=multi-user.target. After enabling the service with 'systemctl enable container-payments.service' and rebooting, the container does not start. The administrator checks 'systemctl status container-payments.service' and sees that the service is inactive (dead). What is the most likely reason and the correct fix?

Question 48mediummultiple choice

Read the full Manage containers explanation →

An administrator attempts to start a container with `podman run -d --name web -p 80:80 nginx`. The container fails to start and the logs show 'Error: cannot listen on port 80'. Which of the following is the most likely cause?

Question 49hardmulti select

Read the full Manage containers explanation →

A system administrator needs to ensure that data written to a container's `/var/lib/mysql` directory persists after the container is removed. Which TWO methods accomplish this requirement?

Question 50easymultiple choice

Read the full Manage containers explanation →

Refer to the exhibit. A container named 'db' is running on the host. An administrator runs `podman inspect db` and sees the above output snippet. What can be concluded about the container's network configuration?

Exhibit

Refer to the exhibit.
```json
{
  "NetworkSettings": {
    "IPAddress": "10.88.0.2",
    "Gateway": "10.88.0.1",
    "Ports": {
      "3306/tcp": [
        {
          "HostPort": "3306",
          "HostIp": "0.0.0.0"
        }
      ]
    }
  }
}
```

Refer to the exhibit. $ podman ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES a1b2c3d4e5f6 registry.access.redhat.com/ubi8/ubi "/bin/bash" 5 minutes ago Exited (0) 3 minutes ago mycontainer z9y8x7w6v5u4 do280/httpd "/usr/sbin/httpd -D" 2 hours ago Up 2 hours 0.0.0.0:80->80/tcp webserver

Refer to the exhibit. ```json { "NetworkSettings": { "IPAddress": "10.88.0.2", "Gateway": "10.88.0.1", "Ports": { "3306/tcp": [ { "HostPort": "3306", "HostIp": "0.0.0.0" } ] } } } ```