AWS DevOps Engineer Professional DOP-C01 – Question481

What needs to be done in order to remotely access a Docker daemon running on Linux?

A.
add certificate authentication to the docker API
B. change the encryption level to TLS
C. enable the TCP socket
D. bind the Docker API to a unix socket

Correct Answer: C

Explanation:

Explanation:
The Docker daemon can listen for Docker Remote API requests via three different types of Socket: unix, tcp, and fd. By default, a unix domain socket (or IPC socket) is created at /var/run/docker.sock, requiring either root permission, or docker group membership. If you need to access the Docker daemon remotely, you need to enable the tcp Socket. Beware that the default setup provides unencrypted and un- authenticated direct access to the Docker daemon – and should be secured either using the built in HTTPS encrypted socket or by putting a secure web proxy in front of it.
Reference:
https://docs.docker.com/engine/reference/commandline/dockerd/#daemo…