You have a server named Server1 that runs Windows Server 2016. The Docker daemon runs on Server1. You need to ensure that members of a security group named Docker Administrators can administer Docker. What should you do?
A.
Run the Set-Service cmdlet.
B.
Modify the Security settings of Dockerd.exe.
C.
Edit the Configuration.json file.
D.
Run the sc config command.
E.
Run the sc privs command.
F.
Add Docker Administrators to the local Administrators group.
Suggested Answer:D🗳️
The preferred method for configuring the Docker Engine on Windows is using a configuration file. The configuration file can be found at 'C:\ProgramData\Docker \config\daemon.json'. If this file does not already exist, it can be created. The Docker Engine can also be configured by modifying the Docker service using the sc config command. References: https://docs.microsoft.com/en-us/virtualization/windowscontainers/manage-docker/configure-docker-daemon
I think there is an order of best answer to these similar docker questions.
I think it goes like this, if given the option the best answer is in this order:
1. daemon.json
2. sc config
3. Add Docker Administrators to the local Administrators group
Page 373 of the Exam Ref 70-740 says:
Creating an administrative group:
By default, only members of the local Administrators group can use the Docker client tocontrol the Dockerd engine when working on the local system. In some cases, you can grantusers this ability without giving them Administrators membership. You can configureDockerd to recognize another group—in this case, the group is called “docker”—byincluding the following setting in the daemon.json file.{ "group" : "docker"
The config file for the daemon is called daemon.json, not configuration.json. So that only leaves the sc config, which, although documentation is virtually non-existent, can make changes to the engine.
Reference: https://docs.microsoft.com/en-us/virtualization/windowscontainers/manage-docker/configure-docker-daemon#configure-docker-on-the-docker-service
C is the answer. sc config modifies the properties of a service but cannot grant or deny access to administer a running service. According to the article posted in the answer the configuration file has a group setting that can grant access the docker engine.
For anyone struggling, I've been having a hard time finding any references to SC Config in my official exam books. I have found a website that did mention it. https://commandwindows.com/sc.htm
sc config - Configures service startup and login accounts
I found a few places that mentioned using that to configure the daemon.
D is also correct:
https://docs.microsoft.com/en-us/virtualization/windowscontainers/manage-docker/configure-docker-daemon
By default, only members of the Administrators group can access the Docker Engine through the named pipe. To specify a security group that has this access, use the group flag in daemon.json
That's what I thought.. man these questions actually intend to throw you off
upvoted 2 times
...
...
This section is not available anymore. Please use the main Exam Page.70-740 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Dave_Holden
4 years, 4 months agoUsmanUmar
4 years, 4 months agoJBSPLAT
4 years, 5 months agoasmaerazgi
4 years, 5 months agonorthgaterebel
4 years, 6 months agonorthgaterebel
4 years, 6 months agoabhic25
4 years, 8 months agoSten111
4 years, 7 months agoBobgross
4 years, 10 months agoIzhar
5 years, 3 months agorbrink2001
5 years, 7 months agoRiven
5 years, 7 months agouevenasdf
5 years, 2 months ago