Oracle 1Z0-1084-20 Online Practice Questions and Exam Preparation

Oracle 1Z0-1084-20 Online Questions & Answers

• Question 1:

  You are working on a cloud native e-commerce application on Oracle Cloud Infrastructure (OCI). Your application architecture has multiple OCI services, including Oracle Functions. You need to trigger these functions directly from other OCI services, without having to run custom code. Which OCI service cannot trigger your functions directly?

  A. OCI Events Service
  B. OCI Registry
  C. OCI API Gateway
  D. Oracle Integration
  B. OCI Registry

  ---

  Oracle Functions is a fully managed, multi-tenant, highly scalable, on-demand, Functions-as-a- Service platform. It is built on enterprise-grade Oracle Cloud Infrastructure and powered by the Fn Project open source engine. Use Oracle

  Functions (sometimes abbreviated to just Functions) when you want to focus on writing code to meet business needs. The serverless and elastic architecture of Oracle Functions means there's no infrastructure administration or software

  administration for you to perform. You don't provision or maintain compute instances, and operating system software patches and upgrades are applied automatically. Oracle Functions simply ensures your app is highly-available, scalable,

  secure, and monitored. With Oracle Functions, you can write code in Java, Python, Node, Go, and Ruby (and for advanced use cases, bring your own Dockerfile, and Graal VM).

  You can invoke a function that you've deployed to Oracle Functions from:

  -

  The Fn Project CLI.

  -

  The Oracle Cloud Infrastructure SDKs.

  -

  Signed HTTP requests to the function's invoke endpoint. Every function has an invoke endpoint.

  -

  Other Oracle Cloud services (for example, triggered by an event in the Events service) or from external services. so You can then deploy your code, call it directly or trigger it in response to events, and get billed only for the resources consumed during the execution. Below are the oracle services that can trigger Oracle functions -Events Service -Notification Service -API Gateway Service -Oracle Integration service(using OCI Signature Version 1 security policy) so OCI Registry services cannot trigger your functions directly

• Question 2:

  You have a containerized app that requires an Autonomous Transaction Processing (ATP) Database. Which option is not valid for o from a container in Kubernetes?

  A. Enable Oracle REST Data Services for the required schemas and connect via HTTPS.
  B. Create a Kubernetes secret with contents from the instance Wallet files. Use this secret to create a volume mounted to the appropriate path in the application deployment manifest.
  C. Use Kubernetes secrets to configure environment variables on the container with ATP instance OCID, and OCI API credentials. Then use the CreateConnection API endpoint from the service runtime.
  D. Install the Oracle Cloud Infrastructure Service Broker on the Kubernetes cluster and deploy serviceinstance and serviceBinding resources for ATP. Then use the specified binding name as a volume in the application deployment manifest.
  A. Enable Oracle REST Data Services for the required schemas and connect via HTTPS.

  ---

  https://blogs.oracle.com/developers/creating-an-atp-instance-with-the-oci-service-broker https://blogs.oracle.com/cloud-infrastructure/integrating-oci-service-broker-with-autonomous- transaction-processing-in-the-real-world

• Question 3:

  You have two microservices, A and B running in production. Service A relies on APIs from service B. You want to test changes to service A without deploying all of its dependencies, which includes service B. Which approach should you take to test service A?

  A. Test against production APIs.
  B. Test using API mocks.
  C. There is no need to explicitly test APIs.
  D. Test the APIs in private environments.
  B. Test using API mocks.

  ---

  Testing using API mocks Developers are frequently tasked with writing code that integrates with other system components via APIs. Unfortunately, it might not always be desirable or even possible to actually access those systems during development. There could be security, performance or maintenance issues that make them unavailable ?or they might simply not have been developed yet. This is where mocking comes in: instead of developing code with actual external dependencies in place, a mock of those dependencies is created and used instead. Depending on your development needs this mock is made "intelligent" enough to allow you to make the calls you need and get similar results back as you would from the actual component, thus enabling development to move forward without being hindered by eventual unavailability of external systems you depend on

• Question 4:

  Which two are characteristics of microservices?

  A. Microservices are hard to test in isolation.
  B. Microservices can be independently deployed.
  C. All microservices share a data store.
  D. Microservices can be implemented in limited number of programming languages.
  E. Microservices communicate over lightweight APIs.
  B. Microservices can be independently deployed.
  E. Microservices communicate over lightweight APIs.

  ---

  https://www.techjini.com/blog/microservices/

• Question 5:

  You need to execute a script on a remote instance through Oracle Cloud Infrastructure Resource Manager. Which option can you use?

  A. Use /bin/sh with the full path to the location of the script to execute the script.
  B. It cannot be done.
  C. Download the script to a local desktop and execute the script.
  D. Use remote-exec
  D. Use remote-exec

  ---

  Resource Manager is an Oracle Cloud Infrastructure service that allows you to automate the process of provisioning your Oracle Cloud Infrastructure resources. Using Terraform, Resource Manager helps you install, configure, and manage resources through the "infrastructure-as-code" model. With Resource Manager, you can use Terraform's remote exec functionality to execute scripts or commands on a remote computer. You can also use this technique for other provisioners that require access to the remote resource.

• Question 6:

  How do you perform a rolling update in Kubernetes?

  A. kubect1 rolling-update
  B. kubect1 upgrade --image=*image:v2
  C. kubect1 update -c
  D. kubect1 rolling-update --image=image
  A. kubect1 rolling-update

  ---

  https://docs.oracle.com/en/cloud/iaas/wercker-cloud/wercm/quickstarts/platforms/kubernetes/

• Question 7:

  A leading insurance firm is hosting its customer portal in Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes with an OCI Autonomous Database. Their support team discovered a lot of SQL injection attempts and cross-site

  scripting attacks to the portal, which is starting to affect the production environment.

  What should they implement to mitigate this attack?

  A. Network Security Lists
  B. Network Security Groups
  C. Network Security Firewall
  D. Web Application Firewall
  D. Web Application Firewall

  ---

  Oracle Cloud Infrastructure Web Application Firewall (WAF) is a cloud-based, Payment Card Industry (PCI) compliant, global security service that protects applications from malicious and unwanted internet traffic. WAF can protect any

  internet facing endpoint, providing consistent rule enforcement across a customer's applications.

  WAF provides you with the ability to create and manage rules for internet threats including Cross- Site Scripting (XSS), SQL Injection and other OWASP-defined vulnerabilities. Unwanted bots can be mitigated while tactically allowed desirable

  bots to enter. Access rules can limit based on geography or the signature of the request.

• Question 8:

  What can you use to dynamically make Kubernetes resources discoverable to public DNS servers?

  A. ExternalDNS
  B. CoreDNS
  C. DynDNS
  D. kubeDNS
  A. ExternalDNS

  ---

  ExternalDNS allows you to control DNS records dynamically via Kubernetes resources in a DNS provider-agnostic way https://github.com/kubernetes-sigs/external-dns/blob/master/README.md https://github.com/kubernetes-sigs/external-dns/blob/master/docs/tutorials/oracle.md

• Question 9:

  You are working on a serverless DevSecOps application using Oracle Functions. You have deployed a Python function that uses the Oracle Cloud Infrastructure (OCI) Python SDK to stop any OC1 Compute instance that does not comply

  with your corporate security standards There are 3 non compliant OCI Compute instances.

  However, when you invoke this function none of the instances were stopped. How should you troubleshoot this?

  A. There is no way to troubleshoot a function running on Oracle Functions.
  B. Enable function logging in the OCI console, include some print statements in your function code and use logs to troubleshoot this.
  C. Enable function remote debugging in the OCI console, and use your favorite IDE to inspect the function running on Oracle Functions.
  D. Enable function tracing in the OCI console, and go to OCI Monitoring console to see the function stack trace.
  B. Enable function logging in the OCI console, include some print statements in your function code and use logs to troubleshoot this.

  ---

  Storing and Viewing Function Logs When a function you've deployed to Oracle Functions is invoked, you'll typically want to store the function's logs so that you can review them later. You specify where Oracle Functions stores a function's logs by setting a logging policy for the application containing the function. You set application logging policies in the Console. Whenever a function is invoked in this application, its logs are stored according to the logging policy that you specified. you can view the logs for a function that have been stored in a storage bucket in Oracle Cloud Infrastructure Object Storage https://docs.cloud.oracle.com/en-us/iaas/Content/Functions/Tasks/functionsexportingfunctionlogfiles.htm

• Question 10:

  As a cloud-native developer, you have written a web service for your company. You have used Oracle Cloud Infrastructure (OCI) API Gateway service to expose the HTTP backend. However, your security team has suggested that your web

  service should handle Distributed Denial-of-Service (DDoS) attack. You are time-constrained and you need to make sure that this is implemented as soon as possible.

  What should you do in this scenario?

  A. Use OCI virtual cloud network (VCN) segregation to control DDoS.
  B. Use a third party service integration to implement a DDoS attack mitigation,
  C. Use OCI API Gateway service and configure rate limiting.
  D. Re-write your web service and implement rate limiting.
  C. Use OCI API Gateway service and configure rate limiting.

  ---

  Having created an API gateway and deployed one or more APIs on it, you'll typically want to limit the rate at which front-end clients can make requests to back-end services. For example, to:

  - maintain high availability and fair use of resources by protecting back ends from being overwhelmed by too many requests

  -prevent denial-of-service attacks

  -constrain costs of resource consumption

  - restrict usage of APIs by your customers' users in order to monetize APIs You apply a rate limit globally to all routes in an API deployment specification. If a request is denied because the rate limit has been exceeded, the response header

  specifies when the request can be retried.

  You can add a rate-limiting request policy to an API deployment specification by:

  using the Console editing a JSON file