28 of 103 questions · Page 2/2 · Lxp Scripting Containers topic · Answers revealed
A Linux administrator wants to run a container that stops automatically after the main process exits. Which Docker run flag should be used?
Correct. --rm removes the container once it stops.
Why this answer
The --rm flag automatically removes the container when it exits, which is appropriate when the container should stop and be cleaned up after its main process finishes.
A Linux administrator is writing a Bash script that must handle errors gracefully. Which TWO of the following techniques ensure the script exits on error and provides debugging information? (Select TWO.)
Prints commands and arguments for debugging.
Why this answer
set -e makes the script exit on any command failure. set -x prints commands as they are executed, aiding debugging. Together they ensure error exit and debugging output.
A DevOps engineer needs to run a Docker container in the background with port mapping from host port 8080 to container port 80, and name the container 'webapp'. Which command accomplishes this?
Correct. -d runs detached, -p maps ports, --name assigns a name.
Why this answer
The docker run command with -d (detach), -p (port mapping), and --name options is the correct way to run a container in the background with port mapping and a name.
A cloud engineer is using Ansible to manage configuration across multiple servers. The engineer needs to store variable data that is specific to each host and sensitive database passwords. Which two Ansible features should be used for these purposes? (Choose two.)
Correct. Vault encrypts sensitive data such as passwords.
Why this answer
host_vars are used for host-specific variables, and Ansible Vault encrypts sensitive data like passwords.
A Bash script contains the following code: if [[ $# -eq 0 ]]; then echo 'No arguments'; fi. What does this code check?
Correct. $# -eq 0 means zero arguments.
Why this answer
The $# variable holds the number of positional parameters passed to the script. The condition checks if it equals 0, meaning no arguments were provided.
An Ansible playbook is being written to install the Nginx web server on a group of Ubuntu servers. Which module should be used in the playbook to install the package?
apt is the correct module for Ubuntu.
Why this answer
The apt module is used for package management on Debian/Ubuntu systems.
In a bash script, an administrator wants to check if a file exists and is readable. Which of the following test expressions accomplishes this?
This correctly checks both conditions using the -a operator.
Why this answer
The test expression `[ -f file -a -r file ]` uses the `-f` flag to check that the file exists and is a regular file, and the `-a` logical AND operator combined with the `-r` flag verifies that the file is readable by the current user. This matches the administrator's requirement exactly.
Exam trap
The Linux+ exam often tests the confusion between file test operators (e.g., `-r` vs `-w` vs `-x`) and the misuse of logical operators (`-a` vs `-o`), leading candidates to select options that check the wrong attribute or combine conditions incorrectly.
How to eliminate wrong answers
Option A is wrong because `[ -e file -a -w file ]` checks if the file exists (`-e`) and is writable (`-w`), not readable. Option B is wrong because `test -d file -o -r file` checks if the file is a directory (`-d`) OR is readable (`-r`), which does not require both conditions and does not verify existence as a regular file. Option C is wrong because `[[ -f file && -x file ]]` checks if the file exists as a regular file (`-f`) AND is executable (`-x`), not readable.
A developer wants to view the logs from a running Docker container named 'myapp'. Which docker command should be used?
Correct. docker logs displays the logs of the container.
Why this answer
The 'docker logs' command fetches the logs of a container.
A Kubernetes administrator needs to expose a deployment named 'webapp' as a service accessible externally on port 80. Which kubectl command should be used?
NodePort exposes the service on a port accessible externally.
Why this answer
kubectl expose deployment webapp --type=NodePort --port=80 creates a service that exposes the deployment externally.
An administrator needs to deploy a set of microservices using Docker Compose. The services require configuration values that vary between development and production environments. Which approach allows the administrator to override values without modifying the docker-compose.yml file?
Correct. Multiple -f files allow overriding settings from the base file.
Why this answer
Docker Compose supports multiple compose files; using multiple -f options allows overriding values from the base file. Environment-specific files like docker-compose.override.yml are automatically used if present, but using explicit -f options is more flexible for different environments.
A containerized application uses a bind mount to persist logs. When the container is removed and recreated, the logs are missing. What is the most likely cause?
Bind mounts are not automatically recreated; they must be specified each time.
Why this answer
Bind mounts depend on the host path; if the bind mount was not re-specified, the new container does not have access to the previous host directory unless explicitly mounted.
A developer is writing a Bash script that needs to parse command-line options with arguments, such as -f filename and -v. Which built-in command should be used to handle these options?
getopts is the built-in command for parsing options in Bash.
Why this answer
getopts is the standard Bash built-in for parsing short options with or without arguments.
Which Dockerfile instruction sets the command to run when the container starts, but allows the user to override it when using docker run?
Correct. CMD sets the default command, which can be overridden.
Why this answer
CMD provides defaults for an executing container. If CMD is used, it can be overridden by command-line arguments to docker run. ENTRYPOINT, on the other hand, is not easily overridden without --entrypoint.
An administrator needs to create a Docker network of type 'bridge' so that containers can communicate with each other by name. Which command creates a user-defined bridge network named 'my-net'?
This command correctly creates a user-defined bridge network named 'my-net' using the -d flag to specify the bridge driver. It provides automatic DNS resolution between containers.
Why this answer
User-defined bridge networks provide automatic DNS resolution between containers. The command is 'docker network create' with the -d (driver) flag.
A developer creates a Dockerfile for a web application. Which instruction should be used to define the command that runs when the container starts, allowing the container to accept arguments from the docker run command?
CMD specifies the default command to run, and can be overridden by docker run arguments.
Why this answer
CMD provides defaults for an executing container, but can be overridden by command-line arguments. ENTRYPOINT is used for main command and CMD for default arguments.
A Docker container needs persistent storage that survives container restarts. Which of the following is the recommended method to achieve this?
Correct. Volumes are managed by Docker and persist data.
Why this answer
Docker volumes are managed by Docker and are the recommended way to persist data, as they are independent of container lifecycle.
A DevOps engineer is writing a Dockerfile for a Python web application. The base image is python:3.9-slim. The application code is in the current directory, and the container should expose port 8080. Which Dockerfile instructions correctly build the image and run the application using python app.py?
Correct order of instructions; CMD uses JSON array form correctly.
Why this answer
It uses the exec form of CMD (CMD ['python', 'app.py']), which directly executes the command without a shell, providing proper signal handling and is the recommended format. Option A uses shell form (CMD python app.py), which runs the command as a subprocess of /bin/sh and may not handle signals correctly, making it less ideal. Additionally, the Dockerfile must include WORKDIR to set the working directory and COPY to add code; all options have these but only B uses the correct CMD syntax.
A Kubernetes administrator is creating a deployment YAML manifest. Which THREE fields are required in a Deployment spec? (Select THREE.)
The apiVersion field is required in every Kubernetes manifest to specify the API version for the resource.
Why this answer
In a Kubernetes Deployment manifest, the three required top-level fields for object identification are apiVersion, kind, and metadata. While spec is also mandatory for a Deployment, the question asks for three required fields and the standard required set is apiVersion, kind, and metadata.
An administrator wants to run a script on multiple remote servers using Ansible. The script requires a variable that differs per host. Where should the administrator define this variable to follow best practices?
host_vars allows defining variables specific to a single host.
Why this answer
Host-specific variables should be defined in host_vars files, which are automatically loaded by Ansible when the host is targeted.
Which Kubernetes resource is used to store non-sensitive configuration data as key-value pairs that can be consumed by pods?
Correct. ConfigMaps store non-sensitive configuration data.
Why this answer
ConfigMaps are used for non-sensitive configuration data. Secrets are for sensitive data like passwords. Deployments manage replicas of pods.
Namespaces isolate resources.
An Ansible playbook is being written to manage web servers. Which TWO modules can be used to ensure a package is installed? (Select TWO.)
Correct. Manages packages on Debian/Ubuntu.
Why this answer
The apt module is for Debian-based systems, and yum is for Red Hat-based systems. Both manage packages.
A user wants to execute a command inside a running Docker container named 'db'. Which command should be used?
Correct. docker exec runs a command in a running container.
Why this answer
docker exec is used to run a command in an existing running container.
A Kubernetes YAML manifest defines a Deployment with 3 replicas. The administrator runs `kubectl get pods` and sees 3 running pods. They then run `kubectl scale deployment mydeployment --replicas=5`. What command would confirm the new number of replicas?
This shows the current state of the deployment, including desired and current replicas.
Why this answer
kubectl get deployment mydeployment shows the current replicas, desired replicas, and status.
A system administrator is writing an Ansible playbook to manage a web server. Which three of the following are valid Ansible modules for system administration? (Choose THREE.)
Controls system services.
Why this answer
apt, service, and copy are standard Ansible modules for package management, service control, and file copying.
A Bash script uses getopts to parse command-line options. The options are -a (requires an argument) and -b (flag). Which code correctly implements this and stores the argument for -a in $optarg?
Correct. The colon after a indicates it requires an argument, and $OPTARG holds the value.
Why this answer
getopts uses the option string 'a:b' where 'a:' indicates -a requires an argument. The argument is stored in the variable $OPTARG (not $optarg).
A bash script needs to test whether a string variable $NAME is non-empty and equals 'admin'. Which of the following conditionals is correct?
Correct. -n tests non-empty, == compares strings.
Why this answer
In bash, [[ -n $NAME ]] tests if the string is non-empty, and == compares strings. Using double brackets is safer for string comparison.
An administrator is writing a Dockerfile. They need to set a default command that can be overridden when running the container. Which instruction should be used?
CMD provides default command and arguments, which can be overridden by docker run command.
Why this answer
CMD provides defaults that can be overridden by command-line arguments, while ENTRYPOINT cannot be easily overridden without --entrypoint.
A DevOps team uses Podman to run containers rootlessly. Which TWO of the following characteristics apply to rootless Podman compared to Docker? (Select TWO).
Podman is designed to be a drop-in replacement for Docker CLI.
Why this answer
Podman does not require a daemon (no central daemon), and it can run containers without root privileges by default using user namespaces.
Ready to test yourself?
Try a timed practice session using only Lxp Scripting Containers questions.