Red Hat Certified Specialist in Containers (EX188, Podman-based) (EX188) (EX188) — Questions 151–225

Which THREE advanced features or driver options can be utilized when creating Podman named volumes with plugins or specialized drivers? (Choose THREE)

An administrator needs to pause all processes inside a running container named db_master without stopping it. Which command accomplishes this?

You want to create a Podman network with a specific subnet and gateway. Which command correctly specifies these parameters?

A user running a rootless container needs to inspect which subordinate UID and GID ranges have been allocated to their user account on the RHEL 9 host. Which files define these mappings?

An operator runs a Podman container and needs to inspect its assigned IP address directly from the container's runtime inspection output. Which command filters the JSON output to show only the IP address?

Which TWO Containerfile instructions are used to bring files or data from outside the container into the build context or image? (Choose two.)

After pushing an image to a registry, a developer wants to tag the local image 'myapp:v1' as 'registry.example.com/myteam/myapp:latest'. Which command accomplishes this?

An administrator needs to check the disk space consumption of all containers, images, and volumes managed by Podman. Which command should be run?

You are designing a container image that runs an executable web server. You want to provide default arguments to the executable that can be easily overridden by a user passing arguments directly to 'podman run'. Which instruction combination is best?

You need to inspect the network traffic of a container by capturing packets on its virtual interface. Where can you find the host-side veth interface name associated with a running container?

An administrator needs to list all created Podman secrets on the system. Which command should they execute?

Which Containerfile instruction sets the working directory for any subsequent RUN, CMD, ENTRYPOINT, COPY, and ADD instructions?

You want to remove a custom Podman network named 'testnet', but it currently has active containers attached to it. What happens?

An administrator needs to pass a single environment variable directly on the command line when starting a container. Which flag accomplishes this?

Which THREE of the following are valid options or flags when working with Podman secrets? (Choose THREE)

Which TWO files or backend network management utilities are heavily relied upon by Podman for container networking stack configuration on modern Linux distributions? (Choose two.)

An administrator wants to temporarily pause a running container's processes and later resume them. Which TWO commands should be used? (Choose TWO)

Which TWO networking configurations are mandatory or automatically handled when creating a user-defined bridge network in Podman? (Choose two.)

Which user instruction changes the user name or UID and group name or GID to use when running subsequent instructions in the Containerfile?

An administrator needs to create a persistent storage volume that Podman can manage independently of any specific container lifecycle. Which command accomplishes this?

An administrator wants to rename an existing stopped container from old_name to new_name. Which command should be used?

An administrator wants to export the filesystem of a container named golden_image into a tar archive file named container_fs.tar. Which command should be used?

An administrator needs to inspect running containers and their resource consumption. Which TWO commands provide information about running container state or resource usage? (Choose TWO)

A rootless user wants to run a container and mount a host directory into it. The container process reports permission denied errors when trying to write to the mounted volume. Which SELinux-related flag is typically appended to the volume mount option to resolve container volume permission issues in rootful mode, or handled via user namespaces in rootless mode?

An administrator configures rootless Podman on RHEL 9. For container user namespace mapping to function correctly for a specific user account, entries must be present in which two system files?

When configuring a custom CNI network in Podman using 'podman network create', which TWO parameters can be explicitly defined via command-line flags during creation? (Choose two.)

An administrator needs to remove all stopped containers from the system to free up disk space in a single command. Which command should be used?

You are troubleshooting a build where a RUN instruction fails because it cannot reach a remote URL to download a file. The local network uses an HTTP proxy. How should you pass the proxy settings to the build command without hardcoding them into the image?

Which THREE commands are valid Podman subcommands for managing container networks? (Choose three)

You need to configure container DNS servers explicitly when running a container, overriding the host's /etc/resolv.conf settings. Which Podman flag do you use?

An administrator needs to inspect low-level configuration, network settings, and state details of a running container named redis_cache in JSON format. Which command provides this?

An operator wants to create a custom user-defined bridge network named 'app-net' with a specific subnet of '192.168.100.0/24' using Podman. Which command is correct?

By default, podman build executes build instructions using the root user. You want to switch the execution context to a non-privileged user named 'appuser' for all subsequent RUN, CMD, and ENTRYPOINT instructions. Which instruction should you use?

How do you list all available Podman networks on your system?

A container named 'app_prod' is currently running, and an operator needs to troubleshoot its current configuration, network settings, and mounted volumes in detail. Which THREE commands or approaches can retrieve this information? (Choose THREE)

When configuring an environment file for use with '--env-file', how are comment lines designated?

Which THREE features or characteristics distinguish the ADD instruction from the COPY instruction in a Containerfile? (Choose three.)

A user wants to save a locally stored container image to a tar archive file to transfer it across systems without a registry. Which command should they use?

A security administrator is implementing image signature verification on RHEL 9. Where is the default system-wide signature policy file located?

You need to configure a container port mapping in Podman Compose so that host port 80 forwards to container port 8080. Which YAML syntax is correct under the service definition?

A container named app_server is running and consuming excessive CPU. An administrator needs to gracefully stop this container with a 30-second timeout before forcing termination. Which command accomplishes this?

An administrator needs to restart a running container named app_v1 so that configuration changes take effect. Which command performs a container restart?

Which TWO conditions are typically required for rootless container users to successfully map UIDs and GIDs from host accounts to container accounts? (Choose two.)

Which TWO commands help clean up unused or dangling Podman storage resources? (Choose TWO)

You are deploying a container and want to bind its published port exclusively to the loopback interface (127.0.0.1) on the host to prevent external network access. Which syntax is correct?

An administrator wants to bind mount a host file directly into a container as a configuration file. Is this supported in Podman?

You have a file named config.env containing multiple KEY=VALUE pairs. Which flag allows you to load these configurations into a container as environment variables?

An administrator is troubleshooting container exit codes. A container exited with code 137. What does this specific exit code typically signify in container engines?

A Podman secret named 'db_password' has been created. How is this secret made accessible inside a running container?

An administrator is troubleshooting container exit codes and low-level state details. Which TWO of the following inspect format expressions correctly extract container state attributes? (Choose TWO)

An administrator wants to run a one-off command (/bin/sh) interactively inside an existing running container named legacy_app. Which command should be used?

You need to completely remove a custom user-defined bridge network named 'test-net' that has no active containers attached to it. Which command performs this action?

An administrator needs to commit the changes made to a running container named test_lab into a new image named my_custom_img:latest. Which command should be used?

Which command removes all unused Podman networks that are not currently connected to any containers?

When configuring container networking in Podman, which TWO built-in network modes are available by default without creating custom networks? (Choose two)

An administrator has created a systemd service file named container-web.service using podman generate systemd. Where should this file be placed for a rootless user to manage it as a user-level service?

A container image needs to automatically extract a local tar archive file named 'app.tar.gz' into the destination directory '/opt/app' during the build process. Which instruction should be used?

Which TWO statements are true regarding the EXPOSE instruction in a Containerfile? (Choose two.)

An administrator needs to run a container that requires access to the host's network stack directly, bypassing network isolation. Which flag should be passed to 'podman run'?

An administrator needs to clean up stopped containers and unused data to reclaim disk space. Which TWO commands can be used to remove containers? (Choose TWO)

A developer needs to pull an image from a private registry that requires credentials without running an interactive shell session. Where are the authentication credentials stored after a successful 'podman login' command?

How does Podman's rootless build architecture handle volume mounts or privileged operations specified within a RUN instruction in a Containerfile?

An administrator needs to create a temporary filesystem mount stored purely in host memory for high-performance temporary data inside a container. Which mount type should be used?

When generating Kubernetes YAML using 'podman generate kubernetes', which TWO object types can be targeted or generated by the command? (Choose two.)

You need to label your container image with maintainer details and version metadata according to OCI annotation standards. Which instruction should you use?

Which THREE statements are true concerning how Podman builds container images and utilizes the build context? (Choose three.)

Which flag can be passed to 'podman run' to automatically remove the container and its anonymous volumes upon exit?

You are troubleshooting a container that should have no network access whatsoever for security isolation. Which networking option should you apply?

Which TWO instructions in a Containerfile can be used to set metadata or default execution parameters that influence how a container runs? (Choose two.)

An administrator needs to attach to the terminal of a currently running container named backend_app to view its active console output interactively. Which command should be used?

Which TWO types of storage mechanisms are natively supported by Podman for container data persistence? (Choose two.)

Which THREE inspection or cleanup actions can be performed on Podman secrets? (Choose THREE)

Which TWO SELinux relabeling suffixes can be appended to a Podman volume or bind mount? (Choose TWO)

When writing a Containerfile, which instruction specifies the base image to be used for the subsequent build steps?

An administrator needs to configure a local container registry mirror that redirects all requests for 'registry.redhat.io' to an internal caching proxy 'mirror.corp.local'. Which section of /etc/containers/registries.conf must be modified?