Free DCA: Docker Certified Associate (DCA) Exam Questions and Answers
42 verified practice questions for DCA.
The first 10 questions on this page are free to read, answers included — no account and no card. A plan opens the rest of the bank, the full timed practice test and your weak-topic reporting.
Last updated: September 19, 2026
- Exam code
- DCA
- Provider
- Docker
- Questions in our bank
- 1000+
- Free to read
- First 10, with answers
- Our test mode duration & pass mark
- 130 mins · 70%
- Verified answers
- Reviewed weekly
Recommended: Switch to Test Mode to start a practice test that simulates the real exam experience.
Question #1
The following health check exists in a Dockerfile: 'HEALTCHECK CMD curl --fail http://localhost/health || exit 1 ' Which of the following describes its purpose?
Please select an optionIncorrectCorrect answer: D
HEALTHCHECK CMD registers a command that the Docker engine periodically runs inside the container to report whether the application is healthy. The trailing curl --fail || exit 1 marks the check unhealthy; it does not kill the container, and it does not monitor the Docker engine.
Was this answer correct?Question #2
Which of the following commands will create a swarm service which only listens on port 53 using the UDP protocol?
Please select an optionIncorrectCorrect answer: A
Publishing the port as 53:53/udp tells swarm to expose it over UDP, so the service listens on port 53 using that protocol. The other forms use invalid or non-existent flags such as --udp or --service.
Was this answer correct?Question #3
What is used by the kernel to Isolate resources when running Docker containers?
Please select an optionIncorrectCorrect answer: D
Control groups are what the kernel uses to meter and isolate resource consumption such as CPU and memory for each container. Namespaces isolate what processes can see rather than the resources they consume.
Was this answer correct?Question #4
Which of the following statements is true about secrets?
Please select an optionIncorrectCorrect answer: D
docker secret create accepts a file path or reads the secret from standard input, so both sources work. Secrets are stored encrypted on manager nodes and cannot be modified once created.
Was this answer correct?Question #5
What is the docker command to setup a swarm?
Please select an optionIncorrectCorrect answer: A
https://docs.docker.com/engine/reference/commandline/swarm/
Was this answer correct?Question #6
What is the recommended way to configure the daemon flags and environment variables for your Docker daemon in a platform independent way?
Please select an optionIncorrectCorrect answer: B
The daemon.json file under /etc/docker is the platform-independent place for daemon configuration options, applying on Linux and Windows. DOCKER_OPTS and docker config are not the recommended daemon configuration path.
Was this answer correct?Question #7
Which of these swarm manager configurations will cause the cluster to be in a lost quorum state?
Please select an optionIncorrectCorrect answer: A
Quorum for four managers is three, so two healthy managers out of four cannot reach a majority and the cluster loses quorum. The other configurations all retain a healthy majority.
Was this answer correct?Question #8
Which one of the following commands will result in the volume being removed automatically once the container has exited?
Please select an optionIncorrectCorrect answer: C
The --rm flag removes the container and its anonymous volumes automatically once it exits. --del, --remove and --read-only are not flags that clean up on exit.
Was this answer correct?Question #9
Following the principle of least privilege, which of the following methods can be used to securely grnt access to the specific user to communicate to a Docker engine? (Choose two.)
Select 2 answers.
Please select an optionIncorrectCorrect answer: B, E
Least privilege means granting only the access needed: mutual TLS client certificates authenticate a specific user to the daemon, and the docker group allows talking to the daemon without root. Binding the daemon to all interfaces or granting root violates least privilege.
Was this answer correct?Question #10
Which of the following is true about using the '-P' option when creating a new container?
Type your answer, then reveal.
Please select an optionIncorrectCorrect answer: AExplanationControllare
The -P flag publishes every exposed container port to a randomly chosen ephemeral port on the host, on all host interfaces. Naming a specific host interface requires explicit -p bindings, and -P grants no extra privileges.
Continue with DCA: Docker Certified Associate (DCA) Exam
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in DCA: Docker Certified Associate (DCA) Exam, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Reviews
★★★★★
This platform is a lifesaver. The practice questions and explanations are so detailed. It’s the best study tool I’ve ever used.
Hannah Smith
USA
★★★★★
I highly recommend Exam Practice. The feedback after each test helped me improve significantly, and I passed my exams easily.
Oscar Nyström
Sweden
★★★★★
Exam Practice is worth every penny. The mock exams are realistic, and the feedback helped me focus on key areas.
Amit Sharma
India



