A.Continuous Delivery does not use automated testing at all
B.Continuous Delivery requires manual approval to release to production, while Continuous Deployment releases automatically
C.Continuous Deployment only works with mobile applications
D.Continuous Delivery is faster than Continuous Deployment in all cases
Correct Answer: Continuous Delivery requires manual approval to release to production, while Continuous Deployment releases automatically
Explanation:
In Continuous Delivery, code is always ready to deploy but a human triggers the final release. In Continuous Deployment, every change that passes automated tests is released automatically.
Incorrect! Try again.
2Which of the following is a key goal of Continuous Delivery?
D.The current live version and the new version to switch to
Correct Answer: The current live version and the new version to switch to
Explanation:
Blue-Green uses two identical environments: one (Blue) runs the live version while the other (Green) hosts the new version. Traffic is switched once the new version is verified.
Terraform is an Infrastructure as Code tool used to provision and manage infrastructure across various cloud providers using declarative configuration files.
Incorrect! Try again.
10Which configuration management tool is known for being agentless and using SSH?
Terraform uses HCL, a declarative language designed to describe infrastructure resources in a readable and structured way.
Incorrect! Try again.
13Which command is used to preview the changes Terraform will make before applying them?
Infrastructure Automation with Ansible and Terraform
Easy
A.terraform compile
B.terraform plan
C.terraform delete
D.terraform build
Correct Answer: terraform plan
Explanation:
terraform plan shows an execution plan of what Terraform will create, change, or destroy without actually making the changes.
Incorrect! Try again.
14In Ansible, what is a group of hosts defined in an inventory file called?
Infrastructure Automation with Ansible and Terraform
Easy
A.A firewall
B.A host group
C.A container
D.A snapshot
Correct Answer: A host group
Explanation:
The Ansible inventory organizes managed nodes into host groups so tasks can be targeted at specific sets of machines.
Incorrect! Try again.
15What is the main benefit of containerization?
Containerization Introduction
Easy
A.Packaging applications with their dependencies for consistent execution across environments
B.Increasing the size of the operating system
C.Making applications run only on one specific machine
D.Removing the need for any code
Correct Answer: Packaging applications with their dependencies for consistent execution across environments
Explanation:
Containers bundle an application with its dependencies, ensuring it runs consistently regardless of the underlying environment.
Incorrect! Try again.
16How do containers differ from traditional virtual machines?
Containerization Introduction
Easy
A.Containers require more memory than VMs
B.Containers share the host OS kernel, while VMs include a full guest OS
C.Containers cannot run applications
D.VMs are always smaller than containers
Correct Answer: Containers share the host OS kernel, while VMs include a full guest OS
Explanation:
Containers are lightweight because they share the host operating system kernel, whereas each VM runs a complete guest operating system.
Incorrect! Try again.
17Which component is the background service that manages Docker objects like images and containers?
Docker Architecture & Workflow
Easy
A.Docker calculator
B.Docker text editor
C.Docker Hub browser
D.Docker daemon (dockerd)
Correct Answer: Docker daemon (dockerd)
Explanation:
The Docker daemon (dockerd) runs in the background and manages Docker objects such as images, containers, networks, and volumes.
Incorrect! Try again.
18What is Docker Hub primarily used for?
Docker Architecture & Workflow
Easy
A.Editing source code files
B.Managing DNS records
C.Compiling C++ programs
D.Storing and sharing Docker images
Correct Answer: Storing and sharing Docker images
Explanation:
Docker Hub is a cloud-based registry where users can store, share, and pull Docker images.
Incorrect! Try again.
19Which Dockerfile instruction specifies the base image to build upon?
Writing Dockerfiles
Easy
A.EXPOSE
B.RUN
C.COPY
D.FROM
Correct Answer: FROM
Explanation:
The FROM instruction sets the base image and must be the first instruction in a Dockerfile.
Incorrect! Try again.
20Which command is used to build a Docker image from a Dockerfile?
Building Images
Easy
A.docker build
B.docker start
C.docker pull
D.docker login
Correct Answer: docker build
Explanation:
The docker build command reads a Dockerfile and creates a Docker image from its instructions.
Incorrect! Try again.
21A team has an automated pipeline that builds, tests, and stages every commit, but a human must click Approve before code reaches production. Which practice does this describe?
Introduction Continuous Delivery & Continuous Deployment
Medium
A.Continuous Monitoring
B.Continuous Delivery
C.Continuous Integration
D.Continuous Deployment
Correct Answer: Continuous Delivery
Explanation:
Continuous Delivery keeps every change deployable and automated up to production, but the final release to production requires a manual approval. Continuous Deployment removes that manual gate.
Incorrect! Try again.
22Which statement best distinguishes Continuous Deployment from Continuous Delivery?
Introduction Continuous Delivery & Continuous Deployment
Medium
A.Continuous Deployment applies only to configuration files, not application code
B.Continuous Deployment releases every passing change to production automatically with no manual gate
C.Continuous Deployment only builds and tests code but never releases it
D.Continuous Deployment requires manual approval before each production release
Correct Answer: Continuous Deployment releases every passing change to production automatically with no manual gate
Explanation:
In Continuous Deployment, any change that passes the automated pipeline is pushed to production without human intervention, unlike Continuous Delivery which stops at a manual release gate.
Incorrect! Try again.
23In Jenkins, which plugin lets you define an entire delivery workflow as code using a Jenkinsfile?
Jenkins Plugins for CD
Medium
A.Timestamper Plugin
B.Mailer Plugin
C.Pipeline Plugin
D.Green Balls Plugin
Correct Answer: Pipeline Plugin
Explanation:
The Pipeline plugin allows the whole build-test-deploy process to be described as code in a Jenkinsfile, enabling version-controlled, repeatable delivery pipelines.
Incorrect! Try again.
24A DevOps engineer wants Jenkins to visualize the flow of a change through build, test, and deploy stages as connected boxes. Which plugin is most appropriate?
Jenkins Plugins for CD
Medium
A.Blue Ocean Plugin
B.JUnit Plugin
C.Credentials Binding Plugin
D.SSH Agent Plugin
Correct Answer: Blue Ocean Plugin
Explanation:
Blue Ocean provides a modern visual interface that displays pipeline stages graphically, making it easy to see the progress of a change through each stage.
Incorrect! Try again.
25A company keeps two identical production environments and switches all traffic from the old one to the new one at once after validation. Which strategy is this?
Deployment Strategies: Rolling, Blue-Green, Canary
Medium
A.Recreate deployment
B.Rolling deployment
C.Blue-Green deployment
D.Canary deployment
Correct Answer: Blue-Green deployment
Explanation:
Blue-Green uses two full environments; traffic is switched from blue (old) to green (new) instantly, enabling fast rollback by switching back.
Incorrect! Try again.
26A team releases a new version to only 5% of users first, monitors error rates, then gradually increases the percentage. Which strategy is used?
Deployment Strategies: Rolling, Blue-Green, Canary
Medium
A.Blue-Green deployment
B.Big-bang deployment
C.Rolling deployment
D.Canary deployment
Correct Answer: Canary deployment
Explanation:
Canary deployment exposes the new version to a small subset of users first, letting the team detect problems before a full rollout.
Incorrect! Try again.
27In a rolling deployment across 10 instances, what is the main advantage compared to a big-bang release?
Deployment Strategies: Rolling, Blue-Green, Canary
Medium
A.Traffic is routed based on user geography only
B.All instances are replaced simultaneously to save time
C.Two full environments are duplicated for instant switching
D.Instances are updated incrementally so the service stays available
Correct Answer: Instances are updated incrementally so the service stays available
Explanation:
Rolling deployment updates instances a few at a time, keeping the remaining instances serving traffic, which avoids full downtime.
Incorrect! Try again.
28Which deployment strategy provides the fastest rollback because the previous version remains fully running in a separate environment?
Deployment Strategies: Rolling, Blue-Green, Canary
Medium
A.Shadow deployment
B.Rolling deployment
C.Canary deployment
D.Blue-Green deployment
Correct Answer: Blue-Green deployment
Explanation:
Because the old (blue) environment stays intact while green serves traffic, rollback is as simple as switching routing back to blue.
Incorrect! Try again.
29Which characteristic best describes Ansible's default operating model?
Configuration Management Basics: Terraform / Puppet / Ansible
Medium
A.Agent-based, requiring a daemon on every managed node
B.Compiled, requiring binaries deployed to each node
C.Agentless, using SSH to push configurations to nodes
D.Pull-based, where nodes fetch a catalog from a master
Correct Answer: Agentless, using SSH to push configurations to nodes
Explanation:
Ansible is agentless and connects to managed nodes over SSH (or WinRM) to push tasks, so no persistent agent is required on the targets.
Incorrect! Try again.
30Puppet typically follows which architecture for applying configuration?
Configuration Management Basics: Terraform / Puppet / Ansible
Medium
A.Agentless push model over SSH from a control node
B.Stateless model with no central server at all
C.Agent-based pull model where nodes retrieve a catalog from a master
D.Event-driven model triggered only by webhooks
Correct Answer: Agent-based pull model where nodes retrieve a catalog from a master
Explanation:
Puppet commonly uses a master-agent architecture where each node's agent periodically pulls a compiled catalog from the Puppet master and applies it.
Incorrect! Try again.
31Which tool is primarily designed for provisioning infrastructure declaratively and maintains a state file to track resources?
Configuration Management Basics: Terraform / Puppet / Ansible
Medium
A.Ansible
B.Chef
C.Terraform
D.Puppet
Correct Answer: Terraform
Explanation:
Terraform is an infrastructure provisioning tool that uses declarative configuration and a state file to map real resources to your configuration for planning changes.
Incorrect! Try again.
32In Terraform, which command shows the actions Terraform will take without actually applying them?
Infrastructure Automation with Ansible and Terraform
Medium
A.terraform destroy
B.terraform apply
C.terraform init
D.terraform plan
Correct Answer: terraform plan
Explanation:
terraform plan produces an execution plan describing what will be created, changed, or destroyed, allowing review before running terraform apply.
Incorrect! Try again.
33An Ansible file that lists the target hosts and groups the automation will run against is called the:
Infrastructure Automation with Ansible and Terraform
Medium
A.Inventory
B.Module
C.Playbook
D.Handler
Correct Answer: Inventory
Explanation:
The inventory defines the managed hosts and their groupings. Playbooks describe the tasks, while modules perform the actual work on the hosts.
Incorrect! Try again.
34Why is Ansible said to be idempotent when running a playbook multiple times?
Infrastructure Automation with Ansible and Terraform
Medium
A.It deletes all resources before reapplying them
B.It randomly selects tasks to run each time
C.It reruns every task from scratch on each execution
D.It only makes changes when the system is not already in the desired state
Correct Answer: It only makes changes when the system is not already in the desired state
Explanation:
Idempotency means re-running a playbook produces the same result; Ansible modules check the current state and only act when a change is required.
Incorrect! Try again.
35Which statement correctly contrasts containers with virtual machines?
Containerization Introduction
Medium
A.Containers require a hypervisor, while VMs do not
B.Containers each run a full guest OS, while VMs share the host kernel
C.Containers cannot be isolated from one another, unlike VMs
D.Containers share the host OS kernel, while VMs each run a full guest OS
Correct Answer: Containers share the host OS kernel, while VMs each run a full guest OS
Explanation:
Containers virtualize at the OS level and share the host kernel, making them lighter and faster to start than VMs, which each include a full guest operating system.
Incorrect! Try again.
36In Docker's architecture, which component is the persistent background service that builds, runs, and manages containers?
Docker Architecture & Workflow
Medium
A.Docker client (docker)
B.Docker Compose
C.Docker daemon (dockerd)
D.Docker registry
Correct Answer: Docker daemon (dockerd)
Explanation:
The Docker daemon dockerd is the background service that manages images, containers, networks, and volumes; the client sends commands to it via the API.
Incorrect! Try again.
37When you run docker pull nginx, where does Docker fetch the image from by default?
Docker Architecture & Workflow
Medium
A.A running container
B.Docker Hub registry
C.The local build cache only
D.The Dockerfile in the current directory
Correct Answer: Docker Hub registry
Explanation:
By default Docker pulls images from Docker Hub, the public registry, unless another registry is explicitly specified in the image name.
Incorrect! Try again.
38In a Dockerfile, what is the key difference between the CMD and ENTRYPOINT instructions?
Writing Dockerfiles
Medium
A.Both are identical and interchangeable in all cases
B.ENTRYPOINT sets the fixed executable, while CMD provides default arguments that can be overridden
C.CMD sets the fixed executable, while ENTRYPOINT only sets environment variables
D.ENTRYPOINT runs at build time while CMD runs at container start
Correct Answer: ENTRYPOINT sets the fixed executable, while CMD provides default arguments that can be overridden
Explanation:
ENTRYPOINT defines the main command that always runs, and CMD supplies default arguments that can be overridden by arguments passed to docker run.
Incorrect! Try again.
39To reduce cache invalidation and speed up rebuilds when only source code changes, where should COPY package.json and dependency installation be placed in a Dockerfile?
Writing Dockerfiles
Medium
A.In the final instruction of the Dockerfile
B.Inside the CMD instruction
C.After copying the entire application source code
D.Before copying the rest of the application source code
Correct Answer: Before copying the rest of the application source code
Explanation:
Copying dependency manifests and installing them before copying the full source lets Docker reuse the cached dependency layer when only application code changes.
Incorrect! Try again.
40What does the -t flag do in the command docker build -t myapp:1.0 .?
Building Images
Medium
A.Enables verbose build tracing
B.Assigns a name and tag to the resulting image
C.Specifies the target container to run
D.Removes intermediate build containers
Correct Answer: Assigns a name and tag to the resulting image
Explanation:
The -t flag tags the built image with a name and version (here myapp:1.0), and the trailing . sets the build context to the current directory.
Incorrect! Try again.
41A team practices Continuous Delivery but insists on a manual approval gate before the production release. Which statement correctly distinguishes their practice from Continuous Deployment?
Introduction Continuous Delivery & Continuous Deployment
Hard
A.Continuous Deployment requires a manual gate whereas Continuous Delivery removes it
B.In Continuous Delivery the deployable artifact is always production-ready, but a human triggers the final release
C.In Continuous Delivery every change that passes automated tests is released to production automatically
D.Both practices are identical because both require passing automated tests
Correct Answer: In Continuous Delivery the deployable artifact is always production-ready, but a human triggers the final release
Explanation:
Continuous Delivery keeps every build releasable but relies on a manual decision to push to production. Continuous Deployment removes that gate and deploys automatically once tests pass.
Incorrect! Try again.
42An organization has a mature CI pipeline but frequent production incidents traced to configuration drift between staging and production. Which CD principle most directly addresses this?
Introduction Continuous Delivery & Continuous Deployment
Hard
A.Increasing the number of manual approval gates
B.Running more unit tests in the build stage
C.Deploying more frequently to reduce batch size
D.Keeping environments as identical as possible via environment parity
Correct Answer: Keeping environments as identical as possible via environment parity
Explanation:
Configuration drift arises when staging and production diverge. Environment parity (build once, deploy the same artifact and config everywhere) is the CD principle that eliminates drift-induced failures.
Incorrect! Try again.
43In a Jenkins declarative pipeline, you need to pause execution for a manual production approval that times out and aborts after one hour. Which construct achieves this?
Jenkins Plugins for CD
Hard
A.stash step combined with retry
B.input step wrapped in a timeout block
C.when directive with a beforeAgent condition
D.post block with an always condition
Correct Answer: input step wrapped in a timeout block
Explanation:
The input step pauses for human approval, and wrapping it in timeout aborts the stage if no approval arrives within the set duration. when and post do not perform interactive pausing.
Incorrect! Try again.
44A team wants Jenkins pipeline definitions versioned alongside application source and automatically discovered per branch. Which plugin combination best supports this?
Jenkins Plugins for CD
Hard
A.Pipeline (Job DSL) plugin with the Build Pipeline view plugin
B.Multibranch Pipeline with the Jenkinsfile from SCM
C.Copy Artifact plugin with the Promoted Builds plugin
D.Credentials Binding plugin with Parameterized Trigger plugin
Correct Answer: Multibranch Pipeline with the Jenkinsfile from SCM
Explanation:
Multibranch Pipeline scans a repository, creates jobs per branch, and reads the Jenkinsfile from SCM, giving pipeline-as-code that is versioned with the application source.
Incorrect! Try again.
45A service must maintain full capacity during deployment, requires instant rollback, but the team can afford double the infrastructure temporarily. Which strategy fits best?
Deployment Strategies: Rolling, Blue-Green, Canary
Hard
A.Recreate deployment
B.Rolling deployment
C.Canary deployment
D.Blue-Green deployment
Correct Answer: Blue-Green deployment
Explanation:
Blue-Green runs two full environments; traffic switches instantly and rollback is immediate by pointing back to the old environment. It requires roughly double the infrastructure, which the team can afford.
Incorrect! Try again.
46During a canary release, 5% of traffic goes to the new version. Error rate on the canary is versus on the stable version. What is the correct automated response?
Deployment Strategies: Rolling, Blue-Green, Canary
Hard
A.Increase canary traffic to 50% to gather more data
B.Ignore the difference as statistically insignificant
C.Immediately promote the canary to 100% since only 5% is affected
D.Halt the rollout and roll back the canary due to elevated error rate
Correct Answer: Halt the rollout and roll back the canary due to elevated error rate
Explanation:
The canary shows an higher error rate than stable, breaching typical health thresholds. The safe automated action is to halt and roll back, limiting blast radius.
Incorrect! Try again.
47A rolling update with maxSurge=1 and maxUnavailable=0 is applied to a 4-replica deployment. What is the maximum number of pods that can exist simultaneously during the update?
Deployment Strategies: Rolling, Blue-Green, Canary
Hard
A.4 pods
B.3 pods
C.8 pods
D.5 pods
Correct Answer: 5 pods
Explanation:
maxSurge=1 allows one extra pod above the desired 4, so at most pods run at once. maxUnavailable=0 ensures no capacity is lost during the update.
Incorrect! Try again.
48Which statement correctly contrasts Terraform's and Ansible's operational models?
Configuration Management Basics: Terraform / Puppet / Ansible
Hard
A.Both are push-based tools that require a master server
B.Terraform is declarative and state-tracking; Ansible is primarily procedural and stateless per run
C.Both are agent-based and enforce state on a schedule
D.Terraform is procedural; Ansible is declarative with a central state file
Correct Answer: Terraform is declarative and state-tracking; Ansible is primarily procedural and stateless per run
Explanation:
Terraform maintains a state file to reconcile declared infrastructure. Ansible executes tasks procedurally over SSH each run without a persistent state file, making them complementary.
Incorrect! Try again.
49Puppet is described as enforcing 'idempotent' and 'eventual consistency' behavior. Which scenario best illustrates this?
Configuration Management Basics: Terraform / Puppet / Ansible
Hard
A.A manifest runs once and never re-checks the node afterward
B.Each run creates new resources regardless of current state
C.The master pushes changes only when manually triggered by an operator
D.The Puppet agent periodically re-applies the catalog, correcting any drift back to declared state
Correct Answer: The Puppet agent periodically re-applies the catalog, correcting any drift back to declared state
Explanation:
Puppet agents pull and re-apply the catalog on a schedule (default 30 min), continuously reconciling nodes toward the declared state, which is idempotent enforcement with eventual consistency.
Incorrect! Try again.
50A Terraform configuration hardcodes a resource that was later created manually in the cloud console. Running terraform apply tries to create a duplicate. What is the correct remediation?
Infrastructure Automation with Ansible and Terraform
Hard
A.Use terraform import to bring the existing resource under state management
B.Add lifecycle { ignore_changes = all } to skip it
C.Run terraform refresh to auto-detect the resource
D.Delete the manual resource and re-run apply
Correct Answer: Use terraform import to bring the existing resource under state management
Explanation:
terraform import maps an existing real-world resource into the state file so Terraform manages it instead of trying to recreate it. refresh only updates state for already-tracked resources.
Incorrect! Try again.
51In an Ansible playbook, a task must run only once on a single host even when targeting many hosts. Which directive achieves this?
Infrastructure Automation with Ansible and Terraform
Hard
A.run_once: true
B.throttle: 1
C.delegate_to: localhost
D.serial: 1
Correct Answer: run_once: true
Explanation:
run_once: true executes the task a single time (on the first host in the batch) rather than per host. serial and throttle control batching/concurrency, not single execution.
Incorrect! Try again.
52Two engineers run terraform apply concurrently against the same remote backend without locking configured. What is the primary risk?
Infrastructure Automation with Ansible and Terraform
Hard
A.Terraform silently blocks the second run
B.Corrupted or inconsistent state file from simultaneous writes
C.Slower apply times due to network contention
D.Automatic merge of both plans into one
Correct Answer: Corrupted or inconsistent state file from simultaneous writes
Explanation:
Without state locking, concurrent applies can write to the state file simultaneously, corrupting it or causing lost updates. Backends like S3+DynamoDB provide locking to prevent this.
Incorrect! Try again.
53Which statement most accurately explains why containers are more lightweight than traditional virtual machines?
Containerization Introduction
Hard
A.Containers use a hypervisor to emulate hardware efficiently
B.Containers run directly on hardware without any host OS
C.Containers share the host kernel and isolate only user space via namespaces and cgroups
D.Containers include a full guest OS optimized for size
Correct Answer: Containers share the host kernel and isolate only user space via namespaces and cgroups
Explanation:
Containers share the host OS kernel and use namespaces (isolation) and cgroups (resource limits) instead of bundling a full guest OS, making them far lighter than VMs that virtualize hardware.
Incorrect! Try again.
54A stateless microservice scaled to 50 containers loses all in-memory session data when any container restarts. What architectural principle explains the correct handling?
Containerization Introduction
Hard
A.Containers should persist session data on their writable layer
B.Session data should be baked into the image at build time
C.Ephemeral containers must externalize state to a shared store or database
D.Each container should mount the same host directory for sessions
Correct Answer: Ephemeral containers must externalize state to a shared store or database
Explanation:
Containers are ephemeral; their writable layer is lost on restart. Stateless design requires externalizing session state to a shared datastore (e.g., Redis) so any container can serve any request.
Incorrect! Try again.
55When you run docker run nginx, which component is ultimately responsible for creating and running the container process?
Docker Architecture & Workflow
Hard
A.The host kernel scheduler alone
B.The Docker CLI directly
C.The Docker daemon (dockerd) via containerd and a runtime like runc
D.The image registry
Correct Answer: The Docker daemon (dockerd) via containerd and a runtime like runc
Explanation:
The CLI sends the request to dockerd, which delegates to containerd, which invokes a low-level runtime (runc) to create the container using kernel features. The CLI itself does not run containers.
Incorrect! Try again.
56A developer notices that changing one line in application code invalidates the Docker build cache for all subsequent layers, causing slow rebuilds. What is the root cause?
Docker Architecture & Workflow
Hard
A.Source code is copied before dependencies are installed in the Dockerfile
B.The Docker daemon has caching disabled
C.Layers are compressed inefficiently
D.The base image is too large
Correct Answer: Source code is copied before dependencies are installed in the Dockerfile
Explanation:
Docker caches layers in order; any change to a layer invalidates all following layers. Copying frequently-changing source before dependency installation forces reinstalling dependencies every build. Copy dependency manifests first.
Incorrect! Try again.
57Consider a Dockerfile ending with ENTRYPOINT ["python"] and CMD ["app.py"]. What happens when you run docker run myimg script.py?
Writing Dockerfiles
Hard
A.It fails because ENTRYPOINT and CMD conflict
B.It runs python script.py because CMD is overridden by the argument
C.It runs script.py app.py as the command
D.It runs python app.py ignoring the argument
Correct Answer: It runs python script.py because CMD is overridden by the argument
Explanation:
In exec form, the runtime argument replaces CMD, and the result is appended to ENTRYPOINT. So python (ENTRYPOINT) plus script.py (overriding app.py) executes python script.py.
Incorrect! Try again.
58Which Dockerfile technique most effectively reduces final image size for a compiled Go application?
Writing Dockerfiles
Hard
A.Multi-stage build compiling in one stage and copying only the binary to a minimal base
B.Using RUN apt-get clean after each install
C.Adding .dockerignore to exclude source files
D.Setting WORKDIR to a smaller directory
Correct Answer: Multi-stage build compiling in one stage and copying only the binary to a minimal base
Explanation:
Multi-stage builds let you compile with a full toolchain, then copy just the resulting binary into a tiny base (e.g., scratch or alpine), discarding build dependencies and drastically shrinking the final image.
Incorrect! Try again.
59During docker build, you want to inject a secret token needed only at build time without it persisting in any image layer. What is the recommended approach?
Building Images
Hard
A.Store it in an ENV variable early in the Dockerfile
B.Pass it via ARG and reference it in a RUN command
C.Use BuildKit --secret mounts so the value never lands in a layer
D.Copy the secret file with COPY then delete it in a later layer
Correct Answer: Use BuildKit --secret mounts so the value never lands in a layer
Explanation:
BuildKit secret mounts (RUN --mount=type=secret) expose the value only during that command and never write it to a layer. ARG, ENV, and copy-then-delete all leave the secret recoverable in image history.
Incorrect! Try again.
60Two images built from identical Dockerfiles on different machines produce different image digests despite no source changes. What is the most likely cause?
Building Images
Hard
A.One build used more CPU cores than the other
B.Docker digests are always random per build
C.The Dockerfile syntax version differs
D.Non-deterministic layer contents such as timestamps or unpinned base image tags
Correct Answer: Non-deterministic layer contents such as timestamps or unpinned base image tags
Explanation:
Digests are content-addressable hashes. Differences arise from non-reproducible content: file timestamps, package versions, or a mutable base tag (latest) resolving to different images. Pinning by digest improves reproducibility.
Incorrect! Try again.
Did this save you a night before the exam?
LPU Notes is free, and it stays free. Ads cover part of the server bill.
The rest comes out of a student's own pocket: the domain, the storage,
and keeping the site up through the weeks everyone needs it at once.
The payment button didn't load. An ad blocker or a filtered network is the usual reason.
to try again.
Nothing here is ever locked, and nothing unlocks. Chip in only if it was worth it.
What it pays for →