How should I use these Registry And Security practice questions?

Read each scenario carefully and choose your answer before revealing the explanation. Then check why your choice was right or wrong. Repeat until the reasoning feels automatic.

Can I practise just Registry And Security questions in a focused session?

Yes — use the session launcher on this page to start a 10-, 20-, 30- or 50-question session drawn entirely from the Registry And Security domain.

EX188 · topic practice

Registry And Security practice questions

Practise Red Hat Certified Specialist in Containers (EX188, Podman-based) (EX188) Registry And Security practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

Courseiva uses original exam-style practice questions designed for learning and revision. The goal is to understand the concepts, recognise exam patterns, and improve through explanations — not memorise copied exam dumps.

Reviewed byJohnson Ajibi· MSc IT Security

20 questionsDomain: Registry And Security

Practice 10 questions Browse domain →

What the exam tests

What to know about Registry And Security

Registry And Security questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Watch out for

Common Registry And Security exam traps

▸Answering from memory before reading the full scenario.
▸Missing a constraint such as cost, availability, security, scope or command context.
▸Choosing a broad answer when the question asks for the most specific fix.
▸Ignoring why the wrong options are tempting.

Practice set

Registry And Security questions

20 questions · select your answer, then reveal the explanation

Question 1hardmultiple choice

Read the full Registry And Security explanation →

An administrator configures rootless Podman on RHEL 9. For container user namespace mapping to function correctly for a specific user account, entries must be present in which two system files?

Trap 1: /etc/passwd and /etc/group

/etc/passwd and /etc/group define primary system user accounts, not subordinate mapping ranges.

Trap 2: /etc/containers/namespace.conf and /etc/containers/users.conf

These files do not exist.

Trap 3: /etc/security/limits.conf and /etc/login.defs

These files configure resource limits and login defaults.

Study all Registry And Security common traps →

A
/etc/passwd and /etc/group
Why wrong: /etc/passwd and /etc/group define primary system user accounts, not subordinate mapping ranges.
B
/etc/containers/namespace.conf and /etc/containers/users.conf
Why wrong: These files do not exist.
C
/etc/security/limits.conf and /etc/login.defs
Why wrong: These files configure resource limits and login defaults.
D
/etc/subuid and /etc/subgid
/etc/subuid and /etc/subgid allocate ranges of subordinate UIDs and GIDs for rootless users.

Registry And Security practice questions

What to know about Registry And Security

Common Registry And Security exam traps

Registry And Security questions

An administrator configures rootless Podman on RHEL 9. For container user namespace mapping to function correctly for a specific user account, entries must be present in which two system files?

A security officer wants to disable all signature checking for a specific insecure test registry in /etc/containers/policy.json. What transport matching rule should be configured under 'transports'?

An administrator is configuring Podman on a RHEL 9 host to pull images from an internal, insecure container registry at registry.example.com:5000 using HTTP instead of TLS. Where should this registry address be added to allow unencrypted communication?

An administrator needs to configure a custom search domain for short-name image pulls across all users on a RHEL 9 system. Which configuration file must be edited?

A user running rootless Podman wants to pull an image from an insecure registry running over HTTP on port 5000. When running 'podman pull', the command fails with a connection error. Where must the administrator define this registry as insecure for the user?

A user wants to inspect the metadata and layers of an image stored locally without running it. Which Podman command should be used?

A security administrator is implementing image signature verification on RHEL 9. Where is the default system-wide signature policy file located?

An administrator needs to push a locally built Podman image named 'app:latest' to a remote container registry at 'registry.example.com/team'. Which command must be executed first to authenticate with the registry before pushing?

After pushing an image to a registry, a developer wants to tag the local image 'myapp:v1' as 'registry.example.com/myteam/myapp:latest'. Which command accomplishes this?

An administrator needs to run a container that requires access to the host's network stack directly, bypassing network isolation. Which flag should be passed to 'podman run'?

When configuring a secure private registry that uses a self-signed TLS certificate, a user receives an x509 certificate signed by an unknown authority error when pulling images. Where should the CA certificate file be placed on a RHEL system for system-wide trust?

A user wants to remove all unused container images that are not currently associated with an existing container from local storage. Which command should they execute?

An administrator wants to inspect the container storage configuration settings, such as graph root and storage driver, on a RHEL system. Which configuration file should they examine?

A user wants to save a locally stored container image to a tar archive file to transfer it across systems without a registry. Which command should they use?

A developer needs to pull an image from a private registry that requires credentials without running an interactive shell session. Where are the authentication credentials stored after a successful 'podman login' command?

An auditor notices that a container running with SELinux enforcement needs to access a specific host directory with a private read-write security context. Which SELinux suffix should be applied to the volume mount if the content is exclusive to that single container and should not be shared?

A user is running rootless Podman and needs to verify why a container cannot bind to TCP port 80. By default, unprivileged users cannot bind to ports below 1024. Which parameter controls the minimum unprivileged port that can be bound?

An administrator configures a mirror for a primary registry in /etc/containers/registries.conf. What is the correct TOML syntax format to define a registry block with a mirror?

A system administrator needs to load a container image from a previously generated tar archive named 'app.tar' into local Podman storage. Which command should be executed?

Track your progress over time

Start a Registry And Security only practice session

Related EX188 topic practice pages

Container Operations And Lifecycle practice questions

Networking And Compose practice questions

Registry And Security practice questions

Container Image Building practice questions

Storage And Configuration practice questions

EX188 fundamentals practice questions

EX188 scenario practice questions

EX188 troubleshooting practice questions

Frequently asked questions

Track your progress

Study resources

Exam traps to avoid