100+ Free DCA Practice Questions

Pass your Docker Certified Associate (DCA) exam on the first try — instant access, no signup required.

✓ No registration✓ No credit card✓ No hidden fees✓ Start practicing immediately

Not publicly disclosed Pass Rate

100+ Questions

100% Free

1 / 100

Question 1

Score: 0/0

Which command initializes a new Docker Swarm cluster on the current host and promotes it to a manager node?

docker swarm create

docker swarm init

docker node init

docker cluster start

to track

2026 Statistics

Key Facts: DCA Exam

Questions

Mirantis

90 min

Exam Duration

Mirantis

$199

Exam Fee

Mirantis

Pass/Fail

Scoring

Cut score not published

2 years

Certification Valid

Mirantis

25%

Largest Domain

Orchestration

The DCA exam uses 55 questions in 90 minutes and Mirantis does not publish a numeric passing score. The official January 2025 study guide weights Orchestration at 25%, Image Creation, Management, and Registry at 20%, Installation and Configuration at 15%, Networking at 15%, Security at 15%, and Storage and Volumes at 10%. As of March 10, 2026, Mirantis still lists the exam publicly at $199, but no newer public blueprint than the January 2025 guide is posted.

Sample DCA Practice Questions

Try these sample questions to test your DCA exam readiness. Each question includes a detailed explanation. Start the interactive quiz above for the full 100+ question experience with AI tutoring.

1Which command initializes a new Docker Swarm cluster on the current host and promotes it to a manager node?

A.docker swarm create

B.docker swarm init

C.docker node init

D.docker cluster start

Explanation: `docker swarm init` initializes a new swarm and makes the current node the first manager. It returns a join token that worker and manager nodes use to join the cluster. `docker swarm create`, `docker node init`, and `docker cluster start` are not valid Docker CLI commands. Exam tip: use `docker swarm join-token worker|manager` later to retrieve join tokens.

2A swarm cluster has 5 manager nodes. How many managers can fail before the cluster loses quorum and becomes unable to schedule new tasks?

A.1

B.2

C.3

D.4

Explanation: Swarm uses the Raft consensus algorithm, which requires a majority (quorum) of (N/2)+1 managers to be available. With 5 managers, quorum is 3, so the cluster can tolerate the loss of 2 managers. Losing a third would prevent scheduling and cluster state changes. Exam tip: always deploy an odd number of managers (3, 5, or 7) for optimal fault tolerance.

3Which command creates a swarm service named `web` running 3 replicas of nginx and publishes port 80 on the swarm ingress mesh?

A.docker service create --name web --replicas 3 -p 80:80 nginx

B.docker run --name web --scale 3 -p 80:80 nginx

C.docker swarm deploy --name web --replicas 3 nginx

D.docker stack create web --replicas 3 -p 80:80 nginx

Explanation: `docker service create` is the correct command to create a swarm service. `--replicas 3` sets the desired count and `-p 80:80` publishes the port through the swarm routing mesh. `docker run` only manages standalone containers, `docker swarm deploy` is not a valid command, and `docker stack create` does not exist (you use `docker stack deploy -c file.yml`). Exam tip: published ports on services route through the ingress overlay network on every node.

4What is the difference between a `replicated` and a `global` service mode in Docker Swarm?

A.Replicated runs on managers only; global runs on workers only

B.Replicated runs a specified number of tasks; global runs exactly one task on every node that meets constraints

C.Replicated uses host networking; global uses overlay networking

D.Replicated is deprecated; global is the only supported mode

Explanation: A replicated service maintains a fixed number of identical tasks (set with `--replicas`). A global service runs exactly one task on every node in the cluster that meets placement constraints, which is useful for monitoring agents, log shippers, and node-level daemons. Mode is unrelated to networking or to manager/worker roles. Exam tip: when you change cluster size, global services automatically scale, while replicated stay the same.

5Which command lists the tasks (containers) belonging to a swarm service named `api`?

A.docker service tasks api

B.docker service ps api

C.docker service inspect api --tasks

D.docker container ls --service api

Explanation: `docker service ps <service>` lists all tasks for a service across the swarm, including current state, desired state, the node where each task runs, and any error messages. The other syntaxes do not exist. Exam tip: combine with `--filter desired-state=running` to hide stopped or shutdown task records.

6A stack file `compose.yml` defines a service `db`. Which command deploys the stack named `prod` to the swarm?

A.docker stack create prod -f compose.yml

B.docker stack deploy -c compose.yml prod

C.docker compose up -d --stack prod

D.docker swarm stack deploy prod compose.yml

Explanation: `docker stack deploy -c <file> <stack-name>` is the canonical command to deploy a Compose file to a swarm cluster as a stack. `-c` specifies the compose file. The other syntaxes are not valid. Exam tip: only the v3+ Compose file format is fully supported by `docker stack deploy`; some Compose features (build, depends_on conditions) are ignored or unsupported in swarm mode.

7Which placement constraint pins a service to run only on swarm manager nodes?

A.--constraint 'node.role == manager'

B.--placement node=manager

C.--restrict role=manager

D.--node-type manager

Explanation: `--constraint 'node.role == manager'` is the correct syntax to restrict tasks to manager nodes. Constraints can also use labels like `node.labels.zone == us-east-1`. The other options are not valid Docker flags. Exam tip: use `--constraint` to harden services that touch sensitive paths (like `/var/run/docker.sock`) so they run only on trusted manager nodes.

8What does the swarm `ingress` overlay network provide that a user-defined overlay network does not?

A.Encryption between nodes

B.Service discovery via DNS

C.Routing of published ports across all swarm nodes (routing mesh)

D.Higher MTU for jumbo frames

Explanation: The built-in `ingress` overlay network implements the swarm routing mesh, which transparently routes incoming traffic on a published port from any node in the cluster to the actual task container, regardless of which node it runs on. User-defined overlays provide service discovery and east-west traffic but do not handle published ingress ports. Exam tip: you can disable the routing mesh per port with `mode=host` to bypass ingress.

9An administrator wants to update the image of an existing service `web` to nginx:1.27 with a rolling update. Which command performs this safely?

A.docker service set web image=nginx:1.27

B.docker service update --image nginx:1.27 web

C.docker service redeploy web --image nginx:1.27

D.docker swarm update web nginx:1.27

Explanation: `docker service update --image <image> <service>` triggers a rolling update of the service to the new image, respecting the configured `--update-parallelism` and `--update-delay`. The other syntaxes do not exist. Exam tip: configure `--update-failure-action rollback` so a failed batch automatically reverts to the previous working version.

10Which `docker node` command marks a manager as unable to receive new tasks while keeping it in the cluster?

A.docker node pause <node>

B.docker node update --availability drain <node>

C.docker node remove <node>

D.docker node demote <node>

Explanation: `docker node update --availability drain <node>` puts a node into drain state, which stops scheduling new tasks and reschedules existing ones to other nodes. The node remains in the cluster. `docker node pause` does not exist, `remove` evicts the node entirely, and `demote` only changes the manager/worker role. Exam tip: drain managers before performing maintenance like OS upgrades.

About the DCA Exam

The Docker Certified Associate validates practical knowledge of Docker Engine installation and administration, image creation and registry workflows, swarm orchestration, networking, security controls, and container storage. The public Mirantis materials still use Docker Enterprise, UCP, and DTR terminology, so candidates should be comfortable with both legacy product names and modern Mirantis context.

Assessment

13 multiple-choice and 42 discrete-option multiple-choice (DOMC) items

Time Limit

90 minutes

Passing Score

Pass/fail (Mirantis does not publish a numeric passing score)

Exam Fee

$199 USD (Mirantis)

DCA Exam Content Outline

25%

Orchestration

Swarm managers and workers, services, scaling, rolling updates, stacks, configs, secrets, and Kubernetes object basics in the legacy DCA blueprint.

20%

Image Creation, Management, and Registry

Dockerfiles, image layers, build optimization, tagging, registry workflows, image lifecycle, and repository operations.

15%

Installation and Configuration

Docker Engine installation, daemon configuration, logging drivers, namespaces/cgroups, TLS setup, and enterprise deployment or backup concepts.

15%

Networking

Container networking model, bridge and overlay networks, publishing ports, service discovery, load balancing, and Kubernetes networking basics.

15%

Security

Engine hardening, swarm mTLS, content trust, RBAC, image scanning, client bundles, and directory-service integration.

10%

Storage and Volumes

Volumes, bind mounts, tmpfs, storage drivers, devicemapper concepts, object vs block storage, and persistent storage patterns.

How to Pass the DCA Exam

What You Need to Know

Passing score: Pass/fail (Mirantis does not publish a numeric passing score)
Assessment: 13 multiple-choice and 42 discrete-option multiple-choice (DOMC) items
Time limit: 90 minutes
Exam fee: $199 USD

Keys to Passing

Complete 500+ practice questions
Score 80%+ consistently before scheduling
Focus on highest-weighted sections
Use our AI tutor for tough concepts

DCA Study Tips from Top Performers

1Prioritize orchestration first because it carries 25% of the exam and touches swarm services, scaling, updates, and stacks.

2Memorize Dockerfile instruction behavior, layer caching, build context, and image tagging because image workflows account for 20% of the blueprint.

3Drill command-line tasks hands-on: `docker service`, `docker node`, `docker network`, `docker volume`, `docker stack`, and common `docker run` flags.

4Review legacy Docker Enterprise, UCP, and DTR terminology alongside modern Mirantis wording because the public DCA guide still uses those names.

5Know the difference between volumes, bind mounts, tmpfs, overlay networks, bridge networks, and port publishing because these concepts are easy to confuse under time pressure.

6Treat security as operational, not abstract: practice TLS, content trust, swarm mTLS, RBAC, least privilege, and image-scanning concepts.

Frequently Asked Questions

Is the DCA still available in 2026?

Yes. Mirantis still publicly lists the Docker Certified Associate for purchase as of March 10, 2026, with a listed fee of $199 USD. The public blueprint still points to the January 2025 study guide, so candidates should expect legacy Docker Enterprise terminology such as UCP and DTR.

What is the DCA exam format?

The official DCA page lists 55 questions in 90 minutes. Mirantis states the exam contains 13 multiple-choice items and 42 discrete-option multiple-choice (DOMC) items, so the live exam is not a plain four-option multiple-choice test even though practice banks usually are.

What is the passing score for DCA?

Mirantis does not publish a numeric passing percentage for the DCA. Your score report is pass/fail, so preparation should focus on consistent performance across all six domains rather than chasing an unofficial cutoff.

Which domains matter most on the DCA exam?

Orchestration is the largest domain at 25%, followed by Image Creation, Management, and Registry at 20%. Installation and Configuration, Networking, and Security are each 15%, while Storage and Volumes is 10%.

How should I prepare for the DCA?

Start with Docker Engine fundamentals, then spend most of your time on swarm services, Dockerfiles, registries, networking, and security workflows. Practice commands hands-on, review legacy UCP and DTR terminology from the official guide, and use timed question sets to close weak areas.

Were there any 2026 DCA blueprint changes?

No newer public blueprint than the January 2025 DCA study guide was posted by Mirantis as of March 10, 2026. The main public change visible in 2026 is that Mirantis still sells the exam while some supporting policy pages use newer scheduling and cancellation wording than the older DCA FAQ, so blueprint content appears stable but operational policies should be checked at booking time.