Oracle 1Z0-1084-21 Online Practice Questions and Exam Preparation

Oracle 1Z0-1084-21 Online Questions & Answers

• Question 1:

  You are implementing logging in your services that will be running in Oracle Cloud Infrastructure Container Engine for Kubernetes. Which statement describes the appropriate logging approach?

  A. Each service logs to its own log file.
  B. All services log to an external logging system.
  C. All services log to standard output only.
  D. All services log to a shared log file.
  C. All services log to standard output only.

  ---

  Application and systems logs can help you understand what is happening inside your cluster. The logs are particularly useful for debugging problems and monitoring cluster activity. Most modern applications have some kind of logging mechanism; as such, most container engines are likewise designed to support some kind of logging. The easiest and most embraced logging method for containerized applications is to write to the standard output and standard error streams.

  https://kubernetes.io/docs/concepts/cluster-administration/logging/ https://blogs.oracle.com/developers/5-best-practices-for-kubernetes-security

• Question 2:

  You are using Oracle Cloud Infrastructure (0CI) Resource Manager to manage your infrastructure lifecycle and wish to receive an email each time a Terraform action begins. How should you use the OCI Events service to do this without writing any code?

  A. Create an OCI Notifications topic and email subscription with the destination email address. Then create an OCI Events rule matching "Resource Manager Stack - Update" condition, and select the notification topic for the corresponding action.
  B. Create an OCI Notification topic and email subscription with the destination email address. Then create an OCI Events rule matching "Resource Manager job - Create" condition, and select the notification topic for the corresponding action.
  C. Create a rule in OCI Events service matching the "Resource Manager Stack - Update" condition.Then select "Action Type: Email" and provide the destination email address.
  D. Create an OCI Email Delivery configuration with the destination email address. Then create an OCI Events rule matching "Resource Manager Job - Create" condition, and select the email configuration for the corresponding action.
  B. Create an OCI Notification topic and email subscription with the destination email address. Then create an OCI Events rule matching "Resource Manager job - Create" condition, and select the notification topic for the corresponding action.

  ---

  1.

  Create Notifications Topic and Subscription If a suitable Notifications topic doesn't already exist, then you must log in to the Console as a tenancy administrator and create it. Whether you use an existing topic or create a new one, add an email address as a subscription so that you can monitor that email account for notifications

  2.

  Using the Console to Create a Rule Use the Console to create a rule with a pattern that matches bucket creation events emitted by Object Storage. Specify the Notifications topic you created as an action to deliver matching events. To test your rule, create a bucket. Object Storage emits an event which triggers the action. Check the email specified in the subscription to receive your notification

  https://docs.cloud.oracle.com/en-us/iaas/Content/Events/Concepts/eventsgetstarted.htm https://docs.cloud.oracle.com/en-us/iaas/Content/Events/Concepts/filterevents.htm

• Question 3:

  You need to execute a script on a remote instance through Oracle Cloud Infrastructure Resource Manager. Which option can you use?

  A. Use /bin/sh with the full path to the location of the script to execute the script.
  B. It cannot be done.
  C. Download the script to a local desktop and execute the script.
  D. Use remote-exec
  D. Use remote-exec

  ---

  Resource Manager is an Oracle Cloud Infrastructure service that allows you to automate the process of provisioning your Oracle Cloud Infrastructure resources. Using Terraform, Resource Manager helps you install, configure, and manage resources through the "infrastructure-as-code" model. With Resource Manager, you can use Terraform's remote exec functionality to execute scripts or commands on a remote computer. You can also use this technique for other provisioners that require access to the remote resource.

• Question 4:

  You are building a container image and pushing it to the Oracle Cloud Infrastructure Registry (OCIR). You need to make sure that these get deleted from the repository. Which action should you take?

  A. Create a group and assign a policy to perform lifecycle operations on images.
  B. Set global policy of image retention to "Retain All Images".
  C. In your compartment, write a policy to limit access to the specific repository.
  D. Edit the tenancy global retention policy.
  D. Edit the tenancy global retention policy.

  ---

  Deleting an Image When you no longer need an old image or you simply want to clean up the list of image tags in a repository, you can delete images from Oracle Cloud Infrastructure Registry. Your permissions control the images in Oracle Cloud Infrastructure Registry that you can delete. You can delete images from repositories you've created, and from repositories that the groups to which you belong have been granted access by identity policies. If you belong to the Administrators group, you can delete images from any repository in the tenancy. Note that as well deleting individual images , you can set up image retention policies to delete images automatically based on selection criteria you specify (see Retaining and Deleting Images Using Retention Policies). Note: In each region in a tenancy, there's a global image retention policy. The global image retention policy's default selection criteria retain all images so that no images are automatically deleted.

  However, you can change the global image retention policy so that images are deleted if they meet the criteria you specify. A region's global image retention policy applies to all repositories in the region, unless it is explicitly overridden by one or more custom image retention policies. You can set up custom image retention policies to override the global image retention policy with different criteria for specific repositories in a region. Having created a custom image retention policy, you apply the custom retention policy to a repository by adding the repository to the policy. The global image retention policy no longer applies to repositories that you add to a custom retention policy.

• Question 5:

  Which two are required to enable Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) cluster access from the kubect1 CLI?

  A. An SSH key pair with the public key added to cluster worker nodes
  B. Install and configure the OCI CLI
  C. OCI Identity and Access Management Auth Token
  D. Tiller enabled on the OKE cluster
  E. A configured OCI API signing key pair
  B. Install and configure the OCI CLI
  E. A configured OCI API signing key pair

  ---

  Setting Up Local Access to Clusters To set up a kubeconfig file to enable access to a cluster using a local installation of kubectl and the Kubernetes Dashboard: Step 1: Generate an API signing key pair Step 2: Upload the public key of the API signing key pair Step 3: Install and configure the Oracle Cloud Infrastructure CLI Step 4: Set up the kubeconfig file Step 5: Verify that kubectl can access the cluster

• Question 6:

  You created a pod called "nginx" and its state is set to Pending. Which command can you run to see the reason why the "nginx" pod is in the pending state?

  A. kubect2 logs pod nginx
  B. kubect2 describe pod nginx
  C. kubect2 get pod nginx
  D. Through the Oracle Cloud Infrastructure Console
  B. kubect2 describe pod nginx

  ---

  Debugging Pods

  The first step in debugging a pod is taking a look at it. Check the current state of the pod and recent events with the following command:

  kubectl describe pods ${POD_NAME}

  Look at the state of the containers in the pod. Are they all Running? Have there been recent restarts? Continue debugging depending on the state of the pods.

  My pod stays pending

  If a pod is stuck in Pending it means that it can not be scheduled onto a node. Generally this is because there are insufficient resources of one type or another that prevent scheduling. Look at the output of the kubectl describe ... command

  above. There should be messages from the scheduler about why it can not schedule your pod.

  https://kubernetes.io/docs/tasks/debug-application-cluster/debug-pod-replication-controller/

• Question 7:

  Which two handle Oracle Functions authentication automatically?

  A. Oracle Cloud Infrastructure SDK
  B. cURL
  C. Oracle Cloud Infrastructure CLl
  D. Signed HTTP Request
  E. Fn Project CLI
  C. Oracle Cloud Infrastructure CLl
  E. Fn Project CLI

  ---

  Fn Project CLI you can create an Fn Project CLI Context to Connect to Oracle Cloud Infrastructure and specify -- provider oracle This option enables Oracle Functions to perform authentication and authorization using Oracle Cloud Infrastructure request signing, private keys, user groups, and policies that grant permissions to those user groups.

• Question 8:

  You are developing a serverless application with Oracle Functions. You have created a function in compartment named prod. When you try to invoke your function you get the following error. Error invoking function. status: 502 message: dhcp options ocid1.dhcpoptions.oc1.phx.aaaaaaaac... does not exist or Oracle Functions is not authorized to use it How can you resolve this error?

  A. Create a policy:Allow function-family to use virtual-network-family in compartment prod
  B. Create a policy:Allow any-user to manage function-family and virtual-network-family in compartment prod
  C. Create a policy:Allow service FaaS to use virtual-network-family in compartment prod
  D. Deleting the function and redeploying it will fix the problem
  C. Create a policy:Allow service FaaS to use virtual-network-family in compartment prod

  ---

  Invoking a function returns a FunctionInvokeSubnetNotAvailable message and a 502 error (due to a DHCP Options issue)

  When you invoke a function that you've deployed to Oracle Functions, you might see the following error message:

  {"code":"FunctionInvokeSubnetNotAvailable","message":"dhcp options ocid1.dhcpoptions........ does not exist or Oracle Functions is not authorized to use it"}

  Fn: Error invoking function. status: 502 message: dhcp options ocid1.dhcpoptions........ does not exist or Oracle Functions is not authorized to use it If you see this error:

  Double-check that a policy has been created to give Oracle Functions access to network resources.

  Service Access to Network Resources

  When Oracle Functions users create a function or application, they have to specify a VCN and a subnet in which to create them. To enable the Oracle Functions service to create the function or application in the specified VCN and subnet,

  you must create an identity policy to grant the Oracle Functions service access to the compartment to which the network resources belong. To create a policy to give the Oracle Functions service access to network resources:

  Log in to the Console as a tenancy administrator.

  Create a new policy in the root compartment:

  Open the navigation menu. Under Governance and Administration, go to Identity and click Policies. Follow the instructions in To create a policy, and give the policy a name (for example, functions- service-network-access).

  Specify a policy statement to give the Oracle Functions service access to the network resources in the compartment:

  Allow service FaaS to use virtual-network-family in compartment For example:

  Allow service FaaS to use virtual-network-family in compartment acme-network Click Create.

  Double-check that the set of DHCP Options in the VCN specified for the application still exists.

• Question 9:

  A developer using Oracle Cloud Infrastructure (OCI) API Gateway must authenticate the API requests to their web application. The authentication process must be implemented using a custom scheme which accepts string parameters from the API caller. Which method can the developer use In this scenario?

  A. Create an authorizer function using request header authorization.
  B. Create an authorizer function using token-based authorization.
  C. Create a cross account functions authorizer.
  D. Create an authorizer function using OCI Identity and Access Management based authentication
  B. Create an authorizer function using token-based authorization.

  ---

  Having deployed the authorizer function, you enable authentication and authorization for an API deployment by including two different kinds of request policy in the API deployment specification:

  An authentication request policy for the entire API deployment that specifies:The OCID of the authorizer function that you deployed to Oracle Functions that will perform authentication and authorization.The request attributes to pass to the

  authorizer function.Whether unauthenticated callers can access routes in the API deployment.

  An authorization request policy for each route that specifies the operations a caller is allowed to perform, based on the caller's access scopes as returned by the authorizer function. Using the Console to Add Authentication and Authorization

  Request Policies To add authentication and authorization request policies to an API deployment specification using the Console:

  Create or update an API deployment using the Console, select the From Scratch option, and enter details on the Basic Information page. For more information, see Deploying an API on an API Gateway by Creating an API Deployment and

  Updating API Gateways and API Deployments. In the API Request Policies section of the Basic Information page, click the Add button beside Authentication and specify:

  Application in : The name of the application in Oracle Functions that contains the authorizer function. You can select an application from a different compartment. Function Name: The name of the authorizer function in

  Oracle Functions. Authentication Token: Whether the access token is contained in a request header or a query parameter.

  Authentication Token Value: Depending on whether the access token is contained in a request header or a query parameter, specify:

  Header Name: If the access token is contained in a request header, enter the name of the header. Parameter Name: If the access token is contained in a query parameter, enter the name of the query parameter.

  https://docs.cloud.oracle.com/en-us/iaas/Content/APIGateway/Tasks/apigatewayaddingauthzauthn.htm

• Question 10:

  In a Linux environment, what is the default locations of the configuration file that Oracle Cloud Infrashtructure CLI uses for profile information?

  A. /etc/.oci/config
  B. /usr/local/bin/config
  C. SHOME/.oci/config
  D. /usr/bin/oci/config
  C. SHOME/.oci/config

  ---

  By default, the Oracle Cloud Infrastructure CLI configuration file is located at ~/.oci/config. You might already have a configuration file as a result of installing the Oracle Cloud Infrastructure CLI.