BR-ANAC-DOV-MOD-1 study guide
BR-ANAC-DOV-MOD-1 · Work through your exam, one topic at a time.
The Docker Certified Associate (DCA) is a vendor credential for practitioners who build, ship, and run containerized workloads with Docker. It suits DevOps engineers, platform and infrastructure staff, backend developers, and support engineers who already touch containers day to day and want a structured way to prove breadth. The BR-ANAC-DOV-MOD-1 study guide has 6 sections and about 2,308 words.
01Orchestration
Orchestration is the control plane that decides where and how containers run across a cluster. Candidates must understand the scheduler, desired-state reconciliation, and the object model that expresses intent.
327 words, about 2 min02Image Creation
An image is an ordered stack of immutable, content-addressed layers plus metadata. Each Dockerfile instruction that changes the filesystem creates a layer; metadata instructions such as CMD , ENTRYPOINT , EXPOSE , and LABEL do not.
322 words, about 2 min03Management and Registry
This domain covers day-two operations and image distribution. On the management side, candidates must be fluent with container lifecycle commands ( run , stop , rm , exec , logs , inspect , stats ), resource limits ( --memory , --cpus , and their Swarm equivalents), restart policies ( no , on-failure , always , unless-stopped ), and health checks ( HEALTHCHECK or --health-cmd ).
328 words, about 2 min04Installation and Configuration
Candidates must understand how Docker is installed and configured on a host. The engine consists of the dockerd daemon and the docker CLI, which communicate over a Unix socket ( /var/run/docker.sock ) or a TCP endpoint.
323 words, about 2 min05Networking
Docker networking provides isolation and name resolution between containers. Candidates must know the built-in drivers: bridge (default on a single host, private subnet with NAT), host (no isolation, shares the host network stack), none (no networking), overlay (multi-host, used by Swarm, with an encrypted option), and macvlan (container gets a MAC address on the physical network).
324 words, about 2 min06Security
Container security is layered: host hardening, daemon access, image provenance, runtime isolation, and secrets handling. Candidates must understand that containers share the host kernel, so isolation is weaker than virtual machines.
684 words, about 3 min