DCA Exam Dumps : Docker Certified Associate (DCA) Exam

 The command docker network create -d overlay -o encrypted=true  will ensure that overlay traffic between service tasks is encrypted. This command creates an overlay network with the encryption option enabled, which means that Docker will create IPSEC tunnels between all the nodes where tasks are scheduled for services attached to the overlay network. These tunnels use the AES algorithm in GCM mode and manager nodes automatically rotate the keys every 12 hours1. This way, thedata exchanged between containers on different nodes on the overlay network is secured. References:

Overlay network driver

= Provisioning a Docker config object for each environment is a way to provision configuration to containers at runtime. Docker configs allow services to adapt their behaviour without the need to rebuild a Docker image. Services can only access configs when explicitly granted by a configs attribute within the services top-level element. As with volumes, configs are mounted as files into a service’s container’s filesystem1. Docker configs are supported on both Linux and Windows services2. References: Docker Documentation, Configs top-level element

= The pid namespace is not a Linux kernel namespace that is disabled by default and must be enabled at Docker engine runtime to be used. The pid namespace is one of the six namespaces that are enabled by default when you run a container with Docker1. The pid namespace isolates the process ID number space, meaning that processes in different pid namespaces can have the same PID2. This allows containers to have their own init process with PID 1 and to limit the visibility and interaction of processes between containers and the host3. To disable the pid namespace, you need to use the --pid option with the docker run command and specify the host or another container as the pid mode. References:

Docker run reference | Docker Docs

pid_namespaces(7) - Linux manual page - man7.org

Building containers by hand: The PID namespace - Enable Sysadmin

[Share host and container processes with --pid | Docker Docs]