Exam 70-743 topic 2 question 4 discussion

Actual exam question from Microsoft's 70-743

Question #: 4
Topic #: 2

You have a server named Server1 that runs Windows Server 2016. The Docker daemon runs on Server1.
You need to ensure that members of a security group named Docker Administrators can administer Docker.
What should you do?

A. Run the Set-Service cmdlet.
B. Modify the Security settings of Dockerd.exe.
C. Edit the Daemon.json file.
D. Modify the Security settings of Docker.exe.
E. Add Docker Administrators to the local Administrators group.
F. Run the sc privs command.

Show Suggested Answer

Suggested Answer: C 🗳️
References:
https://docs.microsoft.com/en-us/virtualization/windowscontainers/manage-docker/configure-docker-daemon

by pavlisek at June 25, 2020, 9:14 a.m.

Comments

Submit Cancel

MelvinJohn

4 years, 10 months ago

C -- If you put the docker admins in the local admin group you give them elevated privilages not just to docker. Changing the damon.json file is the prefered method from mircosoft. All questions use the Microsoft preferred methods, either daemon.json or 'sc config', and putting the Docker Administrators in the Local Administrators group could potentially breach security.

upvoted 2 times

...

pavlisek

4 years, 11 months ago

Correct answer is E. Docker can only be administered by an administrator. So, by creating a Docker Administrators group and adding it to the local Administrators group, you allow the Docker Administrators group to administer Docker. If you only edit the daemon.json file, the Docker Administrators group is still not a member of the local Administrator group to have sufficient privileges to administer Docker.

upvoted 2 times

...