DCA Exam Dumps : Docker Certified Associate (DCA) Exam

While removing push access from all other users can prevent an image from being overwritten, it’s not the only way and might not be the most efficient or practical solution, especially in a collaborative environment. Docker Trusted Registry (DTR) provides a feature called ‘Immutable Tags’ which can be used to prevent an image, such as ‘nginx:latest’, from being overwritten. Once a tag is marked as immutable, DTR will prevent any user from pushing the same tag to the repository, thus preserving the image. This allows for better version control and prevents accidental overwrites. Therefore, the solution to prevent an image from being overwritten is not just to remove push access from all other users, but to use the features provided by DTR like ‘Immutable Tags’.

= Linux capabilities are a way of restricting the privileges of a process or a container. By default, Docker containers run with a reduced set of capabilities, which means they cannot perform certain operations that require higher privileges, such as setting the system time1. To allow a container to set the system time, you need to grant it the SYS_TIME capability by using the --cap-add option when running the container2. For example, docker run --cap-add SYS_TIME alpine date -s 12:00 would set the system time to 12:00 inside the alpine container3. References: Docker Documentation, Runtime privilege and Linuxcapabilities, Change system date time in Docker containers without impacting host, Is it possible to change time dynamically in docker container?

The set of commands docker container inspect and docker port cannot identify the published port(s) for a container. The docker container inspect command returns low-level information on a container, such as its ID, name, state, network settings, mounts, etc1. However, it does not show the port mappings between the container and the host2. The docker port command lists the port mappings or a specific mapping for a container, but it requires the container name or ID as an argument3. Therefore, to identify the published port(s) for a container, you need to use both commands together, such as docker port $(docker container inspect -f '{{.Name}}' CONTAINER)4. References:

docker container inspect | Docker Docs

How to inspect a running Docker container - Stack Overflow

docker port | Docker Docs

List port for Docker container using command line - Stack Overflow