BR-ANAC-DOV-MOD-1 study plan
BR-ANAC-DOV-MOD-1 · Give each week a clear focus.
8 weeks · About 6 hours per week
Orchestration
Define orchestration primitives in your own words and map each to a Docker Swarm or Compose construct you can name from memory
Stand up a single-node swarm and deploy a two-service stack from a compose file, then inspect tasks, nodes, and service state
Explain the difference between desired state and observed state, and demonstrate it by scaling a service up and down while watching task churn
Write a one-page glossary covering service, task, replica, node, manager, worker, and quorum
Your checkpoint
A running local swarm with a 2-service stack, plus a glossary page and a screenshot-free written log of scale-up/scale-down task transitions
Orchestration
Configure rolling updates with parallelism, delay, and failure action, then trigger a deliberate failure and observe rollback behavior
Distribute placement using constraints and node labels across at least two nodes
Create and rotate a secret and a config object, then verify which tasks can read them
Diagnose a service stuck in a pending state and document the root cause and fix
Your checkpoint
A written troubleshooting report covering one pending-service incident, one failed rolling update with rollback, and the placement rules used
Orchestration & Storage and Volumes
Attach a named volume and a bind mount to services and compare persistence behavior after a task reschedule
Deploy a stateful workload pinned to a labeled node and confirm data survives container replacement
Enumerate volume drivers and state when a shared-storage driver is required instead of a local volume
Back up and restore volume contents and verify integrity of the restored data
Your checkpoint
A restore-tested backup artifact plus a comparison table of bind mounts versus named volumes versus shared-storage drivers
Image Creation, Management, and Registry
Write a multi-stage Dockerfile that produces a smaller final image and record the size delta
Apply layer-caching best practices and demonstrate a rebuild that reuses cache
Tag images with semantic and immutable identifiers and push them to a local registry
Pull, inspect, and prune images while tracking reclaimed disk space
Your checkpoint
A published image in a local registry with at least two tags, a documented size comparison, and a cache-reuse rebuild log
Image Creation, Management, and Registry & Installation and Configuration
Harden the engine daemon configuration and explain each changed setting
Install Docker on a clean host using the official repository method and verify versions and service startup
Configure registry authentication and confirm an unauthorized push is rejected
Automate image build and push in a short script that fails loudly on error
Your checkpoint
A reproducible install-and-configure script plus a hardened daemon configuration file with a comment justifying every non-default setting
Networking & Security
Create user-defined bridge, overlay, and host networks and state one correct use case for each
Demonstrate service discovery by resolving a service name from another container on the same network
Isolate two stacks on separate overlay networks and prove cross-stack traffic is blocked
Apply least-privilege container settings such as non-root user, read-only root filesystem, and dropped capabilities
Scan an image for vulnerabilities and remediate at least one finding by rebuilding on a newer base
Your checkpoint
A network topology diagram you drew yourself plus a security hardening checklist with before-and-after evidence for each control
Networking & Security & Storage and Volumes
Publish ports and explain the path from host port to container port including ingress routing
Configure TLS for a registry or swarm and verify the handshake succeeds
Integrate secrets with a stateful service and confirm the secret is not baked into the image
Simulate a node failure and confirm workloads reschedule with data intact
Your checkpoint
A failure-drill write-up showing one node outage, workload rescheduling, and data availability after recovery
Orchestration & Image Creation, Management, and Registry & Installation and Configuration & Networking & Security & Storage and Volumes
Rebuild the full environment from scratch using only your own notes and scripts
Time a cold rebuild and identify the slowest step to optimize
Complete a timed mixed-domain practice set and review every missed item to root cause
Write a one-page pre-exam summary of the ten facts you are most likely to forget
Your checkpoint
A from-scratch rebuild completed within your target time, plus a scored practice-set review log and a one-page summary sheet
Milestones
Week 2: Deploy, scale, update, and roll back a multi-service stack on a two-node swarm without consulting notes, explaining each command's effect on desired state
Week 4: Build a multi-stage image, tag it twice, push to a local registry, and articulate the layer-cache and image-size tradeoffs you made
Week 6: Stand up three isolated networks, prove one cross-network connection is denied, and pass your own hardening checklist on a rebuilt image
Week 8: Reproduce the entire environment from scratch in under your target time and score at least 80 percent on a timed mixed-domain practice set