Domain 5: Security (15% of exam)

← Domain 4: Networking | Back to Study Guide Index

• (Since Study Guide 1.5) Describe security administration and tasks
• Describe the process of signing an image
• Describe default engine security
• Describe swarm default security
• Describe MTLS
• Identity roles
• Describe the difference between UCP workers and managers:
  • workers
  • managers
• Describe process to use external certificates with:
  1. UCP
  • from cli
  • from GUI
  • print the public certificates
  2. DTR is now Mirantis Secure Registry or MSR
• Describe and demonstrate that an image passes a security scan
• Describe and demonstrate how to enable Docker Content Trust.
• Describe and demonstrate how to configure RBAC with UCP
• Describe and demonstrate how to integrate UCP with LDAP/AD
• Describe and demonstrate how to create UCP client bundles

---

← Domain 4: Networking | Back to Study Guide Index | Next: Domain 6 - Storage and Volumes →