DOCKER CERTIFIED ASSOCIATE – QUESTIONS AND CORRECT ANSWERS
(VERIFIED ANSWERS) PLUS RATIONALES 2026 Q&A | INSTANT DOWNLOAD PDF.
*CORE DOMAINS*
Container Orchestration and Swarm Mode
Image Creation, Management, and Registry Operations
Docker Storage and Data Persistence
Networking Architecture and Security
Docker Security Fundamentals and Compliance
Application Lifecycle Management
Monitoring, Logging, and Troubleshooting
, *INTRODUCTION*
The purpose of this examination is to validate the professional competency of candidates
in managing Docker containerized environments. The assessment evaluates technical
proficiency in image construction, orchestration, security hardening, and storage
configuration. The structure comprises multiple-choice and scenario-based questions
designed to challenge a candidate's ability to navigate complex architectural
requirements. By emphasizing real-world application, the exam tests critical decision-
making under operational constraints. Candidates must demonstrate not only theoretical
mastery of container primitives but also an understanding of regulatory and ethical
standards necessary for maintaining robust, compliant, and efficient production systems
in a professional, enterprise-grade environment.
SECTION ONE: QUESTIONS 1–100
1. Which command is used to display the detailed configuration of a Docker Swarm
node?
A. docker node ls
B. docker inspect
,C. docker swarm status
D. docker node inspect
🟢D
🔴 RATIONALE: The docker node inspect command provides the most granular, JSON-
formatted detail regarding a specific node's state, role, and configuration within a Swarm
cluster.
2. When defining a Dockerfile, which instruction is best practice for minimizing image
layers and reducing vulnerability surface area?
A. RUN apt-get update && apt-get install -y package && rm -rf /var/lib/apt/lists/*
B. RUN apt-get update
C. RUN apt-get install -y package
D. RUN rm -rf /var/lib/apt/lists/*
🟢A
🔴 RATIONALE: Combining commands into a single RUN instruction prevents the
creation of intermediate layers and ensures that temporary cache files are removed in
the same layer, resulting in smaller images.
3. You are designing a system that must comply with strict data privacy regulations.
Which Docker feature should be utilized to encrypt sensitive data at rest?
, A. Docker Content Trust
B. Docker Secrets
C. Docker Volumes with encryption plugins
D. Docker BuildKit
🟢C
🔴 RATIONALE: While Secrets handle transmission and environment injection, storing
sensitive data on disk requires volume plugins that support encryption-at-rest to meet
regulatory compliance standards.
4. A container is failing to start due to a memory limit breach. Which flag should be
used at runtime to increase the hard memory limit to 512MB?
A. --memory=512m
B. --mem-limit=512
C. --max-memory=512m
D. --limit-memory=512
🟢A
🔴 RATIONALE: The --memory flag (or -m) is the standard Docker CLI option to define
the maximum amount of memory a container is permitted to consume.
5. What is the primary purpose of the Overlay network driver in a multi-host Docker
Swarm environment?
(VERIFIED ANSWERS) PLUS RATIONALES 2026 Q&A | INSTANT DOWNLOAD PDF.
*CORE DOMAINS*
Container Orchestration and Swarm Mode
Image Creation, Management, and Registry Operations
Docker Storage and Data Persistence
Networking Architecture and Security
Docker Security Fundamentals and Compliance
Application Lifecycle Management
Monitoring, Logging, and Troubleshooting
, *INTRODUCTION*
The purpose of this examination is to validate the professional competency of candidates
in managing Docker containerized environments. The assessment evaluates technical
proficiency in image construction, orchestration, security hardening, and storage
configuration. The structure comprises multiple-choice and scenario-based questions
designed to challenge a candidate's ability to navigate complex architectural
requirements. By emphasizing real-world application, the exam tests critical decision-
making under operational constraints. Candidates must demonstrate not only theoretical
mastery of container primitives but also an understanding of regulatory and ethical
standards necessary for maintaining robust, compliant, and efficient production systems
in a professional, enterprise-grade environment.
SECTION ONE: QUESTIONS 1–100
1. Which command is used to display the detailed configuration of a Docker Swarm
node?
A. docker node ls
B. docker inspect
,C. docker swarm status
D. docker node inspect
🟢D
🔴 RATIONALE: The docker node inspect command provides the most granular, JSON-
formatted detail regarding a specific node's state, role, and configuration within a Swarm
cluster.
2. When defining a Dockerfile, which instruction is best practice for minimizing image
layers and reducing vulnerability surface area?
A. RUN apt-get update && apt-get install -y package && rm -rf /var/lib/apt/lists/*
B. RUN apt-get update
C. RUN apt-get install -y package
D. RUN rm -rf /var/lib/apt/lists/*
🟢A
🔴 RATIONALE: Combining commands into a single RUN instruction prevents the
creation of intermediate layers and ensures that temporary cache files are removed in
the same layer, resulting in smaller images.
3. You are designing a system that must comply with strict data privacy regulations.
Which Docker feature should be utilized to encrypt sensitive data at rest?
, A. Docker Content Trust
B. Docker Secrets
C. Docker Volumes with encryption plugins
D. Docker BuildKit
🟢C
🔴 RATIONALE: While Secrets handle transmission and environment injection, storing
sensitive data on disk requires volume plugins that support encryption-at-rest to meet
regulatory compliance standards.
4. A container is failing to start due to a memory limit breach. Which flag should be
used at runtime to increase the hard memory limit to 512MB?
A. --memory=512m
B. --mem-limit=512
C. --max-memory=512m
D. --limit-memory=512
🟢A
🔴 RATIONALE: The --memory flag (or -m) is the standard Docker CLI option to define
the maximum amount of memory a container is permitted to consume.
5. What is the primary purpose of the Overlay network driver in a multi-host Docker
Swarm environment?
