DCA · Question #16
Which of the following commands will ensure that overlay traffic between service tasks is encrypted?
The correct answer is C. docker network create -d overlay -o encrypted=true <network-name>. To encrypt traffic on a Docker Swarm overlay network, you must create the network with the encrypted=true option.
Question
Which of the following commands will ensure that overlay traffic between service tasks is encrypted?
Options
- Adocker service create --network <network-name> --secure <service-name>
- Bdocker network create -d overlay --secure <network-name>
- Cdocker network create -d overlay -o encrypted=true <network-name>
- Ddocker service create --network <network-name> --encrypted <service-name>
How the community answered
(47 responses)- A2% (1)
- B9% (4)
- C87% (41)
- D2% (1)
Why each option
To encrypt traffic on a Docker Swarm overlay network, you must create the network with the `encrypted=true` option.
There is no `--secure` option for `docker service create` to encrypt network traffic.
There is no `--secure` option for `docker network create` to enable encryption.
Creating an overlay network with `docker network create -d overlay -o encrypted=true <network-name>` enables IPsec encryption for all traffic between containers connected to that specific overlay network within the Swarm cluster, ensuring secure communication between service tasks.
There is no `--encrypted` option for `docker service create` to encrypt network traffic at the service level.
Concept tested: Docker Swarm overlay network encryption
Source: https://docs.docker.com/engine/swarm/networking/#create-an-overlay-network-with-default-encryption
Topics
Community Discussion
No community discussion yet for this question.