Skip to content

Commit c3eafb5

Browse files
lacatoirelacatoire
committed
Add new questions for Orchestration and Image Creation domains
Orchestration (+38 questions): - service_update_rollback.yaml: update/rollback strategies (10) - node_availability.yaml: drain/active/pause states (8) - swarm_autolock.yaml: autolock feature (6) - secrets_and_configs.yaml: Docker secrets and configs (8) - service_healthcheck.yaml: health checks in Swarm (6) Image Creation (+32 questions): - healthcheck_instruction.yaml: HEALTHCHECK in Dockerfile (6) - buildkit_buildx.yaml: BuildKit and buildx (6) - cmd_vs_entrypoint.yaml: CMD vs ENTRYPOINT deep dive (8) - arg_vs_env.yaml: ARG vs ENV instructions (6) - build_cache.yaml: build cache optimization (6)
1 parent 212d635 commit c3eafb5

11 files changed

Lines changed: 640 additions & 0 deletions

‎README.md‎

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -41,6 +41,11 @@ The goal is to help candidates:
4141
* [Describe how a Dockerized application communicates with legacy systems.](data/1_Orchestration/legacy_communication.yaml)
4242
* [Describe how to deploy containerized workloads as Kubernetes pods and deployments.](data/1_Orchestration/k8s_pods_deployments.yaml)
4343
* [Describe how to provide configuration to Kubernetes pods using configMaps and secrets.](data/1_Orchestration/k8s_configmap_secret.yaml)
44+
* [Describe service update and rollback strategies.](data/1_Orchestration/service_update_rollback.yaml)
45+
* [Describe node availability (drain, active, pause).](data/1_Orchestration/node_availability.yaml)
46+
* [Describe the Swarm autolock feature.](data/1_Orchestration/swarm_autolock.yaml)
47+
* [Describe Docker secrets and configs in Swarm.](data/1_Orchestration/secrets_and_configs.yaml)
48+
* [Describe service health checks in Swarm.](data/1_Orchestration/service_healthcheck.yaml)
4449

4550
### Domain 2: Image Creation, Management, and Registry (20% of exam)
4651

@@ -61,6 +66,11 @@ The goal is to help candidates:
6166
* [Push an image to a registry.](data/2_Image_creation_management_registry/push_an_image_to_a_registry.yaml)
6267
* [Sign an image in a registry.](data/2_Image_creation_management_registry/sign_an_image_in_a_registry.yaml)
6368
* [Pull and delete images from a registry.](data/2_Image_creation_management_registry/pull_delete_images_registry.yaml)
69+
* [Describe the HEALTHCHECK instruction in a Dockerfile.](data/2_Image_creation_management_registry/healthcheck_instruction.yaml)
70+
* [Describe BuildKit and docker buildx.](data/2_Image_creation_management_registry/buildkit_buildx.yaml)
71+
* [Compare CMD vs ENTRYPOINT instructions.](data/2_Image_creation_management_registry/cmd_vs_entrypoint.yaml)
72+
* [Compare ARG vs ENV instructions.](data/2_Image_creation_management_registry/arg_vs_env.yaml)
73+
* [Describe Docker build cache optimization.](data/2_Image_creation_management_registry/build_cache.yaml)
6474

6575
### Domain 3: Installation and Configuration (15% of exam)
6676

‎data/1_Orchestration/node_availability.yaml‎

Lines changed: 72 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,72 @@
1+
questions:
2+
- uuid: 7427d279-6a03-499d-8db8-8b33f60ec85e
3+
question: Which command sets a Swarm node to drain availability?
4+
answers:
5+
- { value: 'docker node update --availability drain <node>', correct: true }
6+
- { value: 'docker node drain <node>', correct: false }
7+
- { value: 'docker swarm update --drain <node>', correct: false }
8+
- { value: 'docker node set --status drain <node>', correct: false }
9+
help: 'https://docs.docker.com/reference/cli/docker/node/update/'
10+
11+
- uuid: f4a6b9b3-8933-4c9c-9ea1-d8345989ea76
12+
question: What happens to running tasks on a node when its availability is set to drain?
13+
answers:
14+
- { value: 'Tasks are paused until the node is set back to active', correct: false }
15+
- { value: 'Tasks are stopped and rescheduled on other available nodes', correct: true }
16+
- { value: 'Tasks continue running but no new tasks are assigned', correct: false }
17+
- { value: 'Tasks are deleted permanently', correct: false }
18+
help: 'https://docs.docker.com/engine/swarm/swarm-tutorial/drain-node/'
19+
20+
- uuid: 6d2a3fc6-f24e-4252-8e6b-1a7917f91a6e
21+
question: What are the three possible availability states for a Docker Swarm node?
22+
answers:
23+
- { value: 'active, pause, drain', correct: true }
24+
- { value: 'running, stopped, paused', correct: false }
25+
- { value: 'active, inactive, drain', correct: false }
26+
- { value: 'ready, standby, offline', correct: false }
27+
help: 'https://docs.docker.com/reference/cli/docker/node/update/'
28+
29+
- uuid: 70d6f4a7-8e5c-4b1d-a3f9-4c0e7d2b5a38
30+
question: What is the effect of setting a node to "pause" availability?
31+
answers:
32+
- { value: 'All running tasks are stopped immediately', correct: false }
33+
- { value: 'The node leaves the Swarm cluster', correct: false }
34+
- { value: 'The node does not receive new tasks but existing tasks continue running', correct: true }
35+
- { value: 'The node becomes a manager node', correct: false }
36+
help: 'https://docs.docker.com/engine/swarm/swarm-tutorial/drain-node/'
37+
38+
- uuid: 81e7a5b8-9f6d-4c2e-b4a0-5d1f8e3c6b49
39+
question: Can a manager node be drained in Docker Swarm?
40+
answers:
41+
- { value: 'No, manager nodes cannot be drained', correct: false }
42+
- { value: 'Yes, but it loses its manager status', correct: false }
43+
- { value: 'Yes, it stops running tasks but retains its manager role', correct: true }
44+
- { value: 'Yes, but only if there is a single manager in the cluster', correct: false }
45+
help: 'https://docs.docker.com/engine/swarm/swarm-tutorial/drain-node/'
46+
47+
- uuid: 71b27922-45ab-4e23-822e-692c78185b05
48+
question: After draining a node and performing maintenance, which command makes the node available for tasks again?
49+
answers:
50+
- { value: 'docker node update --availability active <node>', correct: true }
51+
- { value: 'docker node activate <node>', correct: false }
52+
- { value: 'docker node update --status ready <node>', correct: false }
53+
- { value: 'docker node resume <node>', correct: false }
54+
help: 'https://docs.docker.com/reference/cli/docker/node/update/'
55+
56+
- uuid: cde811d8-6da1-4771-8737-849ef4fab487
57+
question: When a drained node is set back to active, do previously running tasks automatically move back to it?
58+
answers:
59+
- { value: 'Yes, all tasks return to their original node', correct: false }
60+
- { value: 'Yes, but only global service tasks return', correct: false }
61+
- { value: 'No, existing tasks stay where they are; the node only receives new or rebalanced tasks', correct: true }
62+
- { value: 'No, the node must rejoin the Swarm to receive tasks', correct: false }
63+
help: 'https://docs.docker.com/engine/swarm/swarm-tutorial/drain-node/'
64+
65+
- uuid: f19b3d4c-c3dd-433a-9f25-3ec41f55aba0
66+
question: Which command can you use to verify the current availability status of all Swarm nodes?
67+
answers:
68+
- { value: 'docker swarm status', correct: false }
69+
- { value: 'docker node ls', correct: true }
70+
- { value: 'docker info --nodes', correct: false }
71+
- { value: 'docker service ps --all', correct: false }
72+
help: 'https://docs.docker.com/reference/cli/docker/node/ls/'

‎data/1_Orchestration/secrets_and_configs.yaml‎

Lines changed: 72 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,72 @@
1+
questions:
2+
- uuid: f5adb06a-f283-4072-8330-e8a12a751a4e
3+
question: Which command creates a Docker secret from a file?
4+
answers:
5+
- { value: 'docker secret add my_secret ./secret.txt', correct: false }
6+
- { value: 'docker secret create my_secret ./secret.txt', correct: true }
7+
- { value: 'docker service secret --add my_secret ./secret.txt', correct: false }
8+
- { value: 'docker config create --secret my_secret ./secret.txt', correct: false }
9+
help: 'https://docs.docker.com/reference/cli/docker/secret/create/'
10+
11+
- uuid: d2d8f6a9-0e7b-4b3c-a5f1-6c2e9d4b7a50
12+
question: Where are Docker secrets mounted inside a service container by default?
13+
answers:
14+
- { value: '/etc/secrets/<secret_name>', correct: false }
15+
- { value: '/var/run/secrets/<secret_name>', correct: false }
16+
- { value: '/run/secrets/<secret_name>', correct: true }
17+
- { value: '/tmp/secrets/<secret_name>', correct: false }
18+
help: 'https://docs.docker.com/engine/swarm/secrets/#how-docker-manages-secrets'
19+
20+
- uuid: e3e9a7b0-1f8c-4c4d-b6a2-7d3f0e5c8b61
21+
question: Which command creates a Docker config from a file?
22+
answers:
23+
- { value: 'docker config create my_config ./config.txt', correct: true }
24+
- { value: 'docker config add my_config ./config.txt', correct: false }
25+
- { value: 'docker service config --add my_config ./config.txt', correct: false }
26+
- { value: 'docker create config my_config ./config.txt', correct: false }
27+
help: 'https://docs.docker.com/reference/cli/docker/config/create/'
28+
29+
- uuid: 17a35533-1048-467a-bf3f-3cf2511e60a5
30+
question: What is a key difference between Docker secrets and Docker configs?
31+
answers:
32+
- { value: 'Secrets are stored in Raft log encrypted; configs are not encrypted at rest', correct: true }
33+
- { value: 'Configs can only be used with global services', correct: false }
34+
- { value: 'Secrets are mounted as volumes; configs are set as environment variables', correct: false }
35+
- { value: 'Configs are limited to 100KB; secrets have no size limit', correct: false }
36+
help: 'https://docs.docker.com/engine/swarm/configs/'
37+
38+
- uuid: 62f66a6c-b332-4f77-ba3f-f0bc8417c8ab
39+
question: How do you grant a running service access to an existing secret?
40+
answers:
41+
- { value: 'docker secret attach my_secret myservice', correct: false }
42+
- { value: 'docker service update --secret-add my_secret myservice', correct: true }
43+
- { value: 'docker service update --mount secret=my_secret myservice', correct: false }
44+
- { value: 'docker secret grant my_secret myservice', correct: false }
45+
help: 'https://docs.docker.com/reference/cli/docker/service/update/'
46+
47+
- uuid: fe43e84a-19ae-40e3-83f1-8e0c89d627cc
48+
question: Can you update or change the content of an existing Docker secret?
49+
answers:
50+
- { value: 'Yes, using docker secret update', correct: false }
51+
- { value: 'Yes, by overwriting it with docker secret create --force', correct: false }
52+
- { value: 'No, secrets are immutable; you must create a new secret and update the service', correct: true }
53+
- { value: 'Yes, but only if no service is using it', correct: false }
54+
help: 'https://docs.docker.com/engine/swarm/secrets/#example-rotate-a-secret'
55+
56+
- uuid: c59fa65c-9ee6-4989-95c0-4b4e45148d8a
57+
question: Where are Docker configs mounted inside a container by default?
58+
answers:
59+
- { value: '/run/configs/<config_name>', correct: false }
60+
- { value: '/<config_name>', correct: true }
61+
- { value: '/etc/configs/<config_name>', correct: false }
62+
- { value: '/var/config/<config_name>', correct: false }
63+
help: 'https://docs.docker.com/engine/swarm/configs/#how-docker-manages-configs'
64+
65+
- uuid: d8d4f2a5-6e3b-4b9c-a1f7-2c8e5d0a3b16
66+
question: Which Docker feature requires Swarm mode to function?
67+
answers:
68+
- { value: 'Volumes', correct: false }
69+
- { value: 'Bridge networks', correct: false }
70+
- { value: 'Secrets', correct: true }
71+
- { value: 'Bind mounts', correct: false }
72+
help: 'https://docs.docker.com/engine/swarm/secrets/'

‎data/1_Orchestration/service_healthcheck.yaml‎

Lines changed: 54 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,54 @@
1+
questions:
2+
- uuid: e9e5a3b6-7f4d-4c0e-b2a8-3d9f6e1b4c27
3+
question: Which flag defines a health check command when creating a Docker Swarm service?
4+
answers:
5+
- { value: '--health-test', correct: false }
6+
- { value: '--healthcheck', correct: false }
7+
- { value: '--health-cmd', correct: true }
8+
- { value: '--check-health', correct: false }
9+
help: 'https://docs.docker.com/reference/cli/docker/service/create/#health-cmd'
10+
11+
- uuid: 44213b9c-edb1-490e-b6d7-8b83c6e61051
12+
question: What are the three possible health states of a container with a health check configured?
13+
answers:
14+
- { value: 'healthy, unhealthy, unknown', correct: false }
15+
- { value: 'starting, healthy, unhealthy', correct: true }
16+
- { value: 'running, stopped, failed', correct: false }
17+
- { value: 'passing, warning, critical', correct: false }
18+
help: 'https://docs.docker.com/reference/dockerfile/#healthcheck'
19+
20+
- uuid: 780e95d2-b8f5-428e-9ed7-2b2cd01147d7
21+
question: What does the --health-retries flag specify?
22+
answers:
23+
- { value: 'The number of times to retry a failed service deployment', correct: false }
24+
- { value: 'The number of consecutive health check failures needed to report unhealthy', correct: true }
25+
- { value: 'The number of health checks to run in parallel', correct: false }
26+
- { value: 'The number of nodes to check health on', correct: false }
27+
help: 'https://docs.docker.com/reference/cli/docker/service/create/#health-retries'
28+
29+
- uuid: 7ca92d5f-1075-4c7e-af6a-3ade80273bd3
30+
question: What does the --health-start-period flag control?
31+
answers:
32+
- { value: 'The time to wait before the first health check runs', correct: false }
33+
- { value: 'The grace period during which health check failures are not counted toward the maximum retries', correct: true }
34+
- { value: 'The interval between health checks at service startup', correct: false }
35+
- { value: 'The maximum time allowed for the service to start', correct: false }
36+
help: 'https://docs.docker.com/reference/cli/docker/service/create/#health-start-period'
37+
38+
- uuid: 96f70b46-c101-4d79-a032-d0fd10dc4297
39+
question: What happens to a Swarm service task when its container is reported as unhealthy?
40+
answers:
41+
- { value: 'The task is paused and an alert is sent', correct: false }
42+
- { value: 'Nothing happens; the task continues running', correct: false }
43+
- { value: 'The task is stopped and a new task is scheduled to replace it', correct: true }
44+
- { value: 'The task is moved to a different node', correct: false }
45+
help: 'https://docs.docker.com/engine/swarm/how-swarm-mode-works/services/'
46+
47+
- uuid: d4d0f8a1-2e9c-4b5d-a7f3-8c4e1d6a9b72
48+
question: What is the default interval between health checks if --health-interval is not specified?
49+
answers:
50+
- { value: '10s', correct: false }
51+
- { value: '30s', correct: true }
52+
- { value: '1m', correct: false }
53+
- { value: '5s', correct: false }
54+
help: 'https://docs.docker.com/reference/dockerfile/#healthcheck'

‎data/1_Orchestration/service_update_rollback.yaml‎

Lines changed: 90 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,90 @@
1+
questions:
2+
- uuid: a3c7e1b4-9f2d-4e8a-b5c6-1d3f7a9e2b04
3+
question: Which command updates the image of an existing Docker Swarm service named "web" to nginx:1.25?
4+
answers:
5+
- { value: 'docker service update --image nginx:1.25 web', correct: true }
6+
- { value: 'docker service create --image nginx:1.25 web', correct: false }
7+
- { value: 'docker service scale --image nginx:1.25 web', correct: false }
8+
- { value: 'docker update --image nginx:1.25 web', correct: false }
9+
help: 'https://docs.docker.com/reference/cli/docker/service/update/'
10+
11+
- uuid: b8d4f2a5-6e3c-4b9d-a1f7-2c8e5d0a3b16
12+
question: What does the --update-delay flag control during a service update?
13+
answers:
14+
- { value: 'The time to wait before starting the update', correct: false }
15+
- { value: 'The time to wait between updating each group of tasks', correct: true }
16+
- { value: 'The maximum time a single task update can take', correct: false }
17+
- { value: 'The time to wait before rolling back on failure', correct: false }
18+
help: 'https://docs.docker.com/engine/swarm/services/#configure-a-services-update-behavior'
19+
20+
- uuid: c9e5a3b6-7f4d-4c0e-b2a8-3d9f6e1b4c27
21+
question: What does --update-parallelism 3 mean when updating a service?
22+
answers:
23+
- { value: 'Three services are updated at the same time', correct: false }
24+
- { value: 'The update runs on three nodes simultaneously', correct: false }
25+
- { value: 'Three tasks are updated at a time during the rolling update', correct: true }
26+
- { value: 'The update retries three times on failure', correct: false }
27+
help: 'https://docs.docker.com/engine/swarm/services/#configure-a-services-update-behavior'
28+
29+
- uuid: 39b5ce22-cbe0-465e-a39a-551f9775a62c
30+
question: What is the default value for --update-failure-action in Docker Swarm?
31+
answers:
32+
- { value: 'rollback', correct: false }
33+
- { value: 'continue', correct: false }
34+
- { value: 'pause', correct: true }
35+
- { value: 'stop', correct: false }
36+
help: 'https://docs.docker.com/engine/swarm/services/#configure-a-services-update-behavior'
37+
38+
- uuid: 216987ff-de4a-44e0-a854-38d136f311e9
39+
question: Which command manually triggers a rollback of a Docker Swarm service?
40+
answers:
41+
- { value: 'docker service revert myservice', correct: false }
42+
- { value: 'docker service update --undo myservice', correct: false }
43+
- { value: 'docker service rollback myservice', correct: true }
44+
- { value: 'docker service update --previous myservice', correct: false }
45+
help: 'https://docs.docker.com/reference/cli/docker/service/rollback/'
46+
47+
- uuid: 42faf48b-afa1-46cd-b294-27d1b86f26ae
48+
question: What does the --update-order start-first option do during a service update?
49+
answers:
50+
- { value: 'It starts the new task before stopping the old task', correct: true }
51+
- { value: 'It stops the old task before starting the new task', correct: false }
52+
- { value: 'It starts the update on the first node in the cluster', correct: false }
53+
- { value: 'It prioritizes manager nodes during the update', correct: false }
54+
help: 'https://docs.docker.com/engine/swarm/services/#configure-a-services-update-behavior'
55+
56+
- uuid: 9c3cb4aa-daa3-4e0a-b80b-9ae8757d2ee6
57+
question: What is the default update order for Docker Swarm service updates?
58+
answers:
59+
- { value: 'start-first', correct: false }
60+
- { value: 'stop-first', correct: true }
61+
- { value: 'parallel', correct: false }
62+
- { value: 'round-robin', correct: false }
63+
help: 'https://docs.docker.com/engine/swarm/services/#configure-a-services-update-behavior'
64+
65+
- uuid: 14d0f8a1-2e9c-4b5d-a7f3-8c4e1d6a9b72
66+
question: Which flag sets the maximum time a single task has to update before it is considered failed?
67+
answers:
68+
- { value: '--update-delay', correct: false }
69+
- { value: '--update-timeout', correct: false }
70+
- { value: '--update-monitor', correct: true }
71+
- { value: '--update-max-time', correct: false }
72+
help: 'https://docs.docker.com/engine/swarm/services/#configure-a-services-update-behavior'
73+
74+
- uuid: 25e1a9b2-3f0d-4c6e-b8a4-9d5f2e7b0c83
75+
question: How do you configure a service so that it automatically rolls back if an update fails?
76+
answers:
77+
- { value: '--update-failure-action rollback', correct: true }
78+
- { value: '--rollback-on-failure true', correct: false }
79+
- { value: '--update-auto-rollback', correct: false }
80+
- { value: '--update-failure-action revert', correct: false }
81+
help: 'https://docs.docker.com/engine/swarm/services/#configure-a-services-update-behavior'
82+
83+
- uuid: 372fc663-77c2-4bcf-aa95-cc365ffac6f0
84+
question: Which flag configures the delay between task rollbacks during an automatic rollback?
85+
answers:
86+
- { value: '--update-delay', correct: false }
87+
- { value: '--rollback-delay', correct: true }
88+
- { value: '--rollback-interval', correct: false }
89+
- { value: '--rollback-wait', correct: false }
90+
help: 'https://docs.docker.com/engine/swarm/services/#roll-back-to-the-previous-version-of-a-service'

0 commit comments

Comments
 (0)