DCA Exam Dumps : Docker Certified Associate (DCA) Exam

= Creating images that contain the specific configuration for every environment is not a way to provision configuration to containers at runtime. This approach violates the principle of separating application code from configuration, and makes the images less portable and reusable across different environments1. It also increases the maintenance overhead and the risk of configuration drift, as any change in the configuration would require rebuilding and redeploying the images2. To provision configuration to containers at runtime, you should use a different mechanism, such as environment variables, command-line arguments, or config maps345. References:

Configuration management with Containers | Kubernetes

Environment variables in Compose | Docker Docs

Override the default command | Docker Docs

Configuration management with Containers | Kubernetes

 Docker Content Trust (DCT) is a feature that allows users to verify the integrity and publisher of container images they pull or deploy from a registry server, signed on a Notary server12. DCT does not verify or encrypt the Docker registry TLS, which is a separate mechanism for securing the communication between the Docker client and the registry server. The purpose of DCT is to ensure that the images are not tampered with or maliciously modified by anyone other than the original publisher3. References:

Content trust in Docker | Docker Docs

Docker Content Trust: What It Is and How It Secures Container Images

Automation with content trust | Docker Docs

A Kubernetes node is allocated a /26 CIDR block (64 unique IPs) for its address space. This means that the node can assign up to 64 IP addresses to its resources, such as pods and containers. If every pod on this node has exactly two containers in it, then each pod will need two IP addresses, one for each container. Therefore, the node can support up to 32 pods, since 64 / 2 = 32. The other options are incorrect because they either exceed the available IP addresses or do not account for the number of containers per pod. References:

•CIDR Blocks and Container Engine for Kubernetes - Oracle

•How kubernetes assigns podCIDR for nodes? - Stack Overflow