Docker Certified Associate (DCA) — Question 54

You configure a local Docker engine to enforce content trust by setting the environment variable DOCKER_CONTENT_TRUST=1.

If myorg/myimage:1.0 is unsigned, does Docker block this command?

docker image inspect myorg/mayimage:1.0

Answer options

• A. Yes
• B. No

Correct answer: A

Explanation

The correct answer is Yes because with content trust enforced, Docker will block any operations involving unsigned images. Since myorg/myimage:1.0 is unsigned, the command docker image inspect myorg/myimage:1.0 cannot be executed. Therefore, the option No is incorrect.