Oracle 1Z0-1084-21 Online Practice Questions and Exam Preparation

Oracle 1Z0-1084-21 Online Questions & Answers

• Question 21:

  What can you use to dynamically make Kubernetes resources discoverable to public DNS servers?

  A. ExternalDNS
  B. CoreDNS
  C. DynDNS
  D. kubeDNS
  A. ExternalDNS

  ---

  ExternalDNS allows you to control DNS records dynamically via Kubernetes resources in a DNS provider-agnostic way https://github.com/kubernetes-sigs/external-dns/blob/master/README.md https://github.com/kubernetes-sigs/external-dns/blob/master/docs/tutorials/oracle.md

• Question 22:

  In order to effectively test your cloud-native applications, you might utilize separate environments (development, testing, staging, production, etc.). Which Oracle Cloud Infrastructure (OC1) service can you use to create and manage your infrastructure?

  A. OCI Compute
  B. OCI Container Engine for Kubernetes
  C. OCI Resource Manager
  D. OCI API Gateway
  C. OCI Resource Manager

  ---

  Resource Manager is an Oracle Cloud Infrastructure service that allows you to automate the process of provisioning your Oracle Cloud Infrastructure resources. Using Terraform, Resource Manager helps you install, configure, and manage resources through the "infrastructure-as-code" model.

• Question 23:

  Your organization uses a federated identity provider to login to your Oracle Cloud Infrastructure (OCI) environment. As a developer, you are writing a script to automate some operation and want to use OCI CLI to do that. Your security team

  doesn't allow storing private keys on local machines.

  How can you authenticate with OCI CLI?

  A. Run oci setup keys and provide your credentials
  B. Run oci session refresh --profile
  C. Run oci session authenticate and provide your credentials
  D. Run oci setup oci-cli-rc --file path/to/target/file
  C. Run oci session authenticate and provide your credentials

  ---

  Token-based authentication for the CLI allows customers to authenticate their session interactively, then use the CLI for a single session without an API signing key. This enables customers using an identity provider that is not SCIM-

  supported to use a federated user account with the CLI and SDKs.

  Starting a Token-based CLI Session

  To use token-based authentication for the CLI on a computer with a web browser:

  In the CLI, run the following command. This will launch a web browser.

  oci session authenticate

  In the browser, enter your user credentials. This authentication information is saved to the .config file.

• Question 24:

  Which two statements accurately describe Oracle SQL Developer Web on Oracle Cloud Infrastructure (OCI) Autonomous Database?

  A. It is available for databases with dedicated Exadata infrastructure only.
  B. After provisioning into an OCI compute Instance, it can automatically connect to the OCI Autonomous Databases instances.
  C. It is available for databases with both dedicated and shared Exadata infrastructure.
  D. It provides a development environment and a data modeler interface for OCI Autonomous Databases.
  E. It must be enabled via OCI Identity and Access Management policy to get access to the Autonomous Databases instances.
  A. It is available for databases with dedicated Exadata infrastructure only.
  D. It provides a development environment and a data modeler interface for OCI Autonomous Databases.

  ---

  Oracle SQL Developer Web in Autonomous Data Warehouse provides a development environment and a data modeler interface for Autonomous Databases. SQL Developer Web is available for databases with both dedicated Exadata infrastructure and shared Exadata infrastructure. https://docs.cloud.oracle.com/en-us/iaas/Content/Database/Tasks/adbtools.htm

• Question 25:

  Which is NOT a valid option to execute a function deployed on Oracle Functions?

  A. Send a signed HTTP requests to the function's invoke endpoint
  B. Invoke from Oracle Cloud Infrastructure CLI
  C. Invoke from Docker CLI
  D. Trigger by an event in Oracle Cloud Infrastructure Events service
  E. Invoke from Fn Project CLI
  C. Invoke from Docker CLI

  ---

  You can invoke a function that you've deployed to Oracle Functions in different ways:

  Using the Fn Project CLI.

  Using the Oracle Cloud Infrastructure CLI.

  Using the Oracle Cloud Infrastructure SDKs.

  Making a signed HTTP request to the function's invoke endpoint. Every function has an invoke endpoint.

  Each of the above invokes the function via requests to the API. Any request to the API must be authenticated by including a signature and the OCID of the compartment to which the function belongs in the request header. Such a request is

  referred to as a 'signed' request. The signature includes Oracle Cloud Infrastructure credentials in an encrypted form.

• Question 26:

  You are a consumer of Oracle Cloud Infrastructure (OCI) Streaming service. Which API should you use to read and process the stream?

  A. ListMessages
  B. GetMessages
  C. GetObject
  D. ReadMessages
  B. GetMessages

  ---

  https://docs.cloud.oracle.com/en-us/iaas/Content/Streaming/Concepts/streamingoverview.htm Building consumers to read and process messages from a stream using the GetMessages API.

• Question 27:

  A leading insurance firm is hosting its customer portal in Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes with an OCI Autonomous Database. Their support team discovered a lot of SQL injection attempts and cross-site

  scripting attacks to the portal, which is starting to affect the production environment.

  What should they implement to mitigate this attack?

  A. Network Security Lists
  B. Network Security Groups
  C. Network Security Firewall
  D. Web Application Firewall
  D. Web Application Firewall

  ---

  Oracle Cloud Infrastructure Web Application Firewall (WAF) is a cloud-based, Payment Card Industry (PCI) compliant, global security service that protects applications from malicious and unwanted internet traffic. WAF can protect any

  internet facing endpoint, providing consistent rule enforcement across a customer's applications.

  WAF provides you with the ability to create and manage rules for internet threats including Cross- Site Scripting (XSS), SQL Injection and other OWASP-defined vulnerabilities. Unwanted bots can be mitigated while tactically allowed desirable

  bots to enter. Access rules can limit based on geography or the signature of the request.

• Question 28:

  Which is NOT a supported SDk Oracle Cloud Infrastructure (OCI)?

  A. Go SDK
  B. Java SDK
  C. NET SDK
  D. Ruby SDK
  E. Python SDK
  C. NET SDK

  ---

  https://docs.cloud.oracle.com/en-us/iaas/Content/API/Concepts/sdks.htm

  Software Development Kits (SDKs) Build and deploy apps that integrate with Oracle Cloud Infrastructure services. Each SDK provides the tools you need to develop an app, including code samples and documentation to create, test, and troubleshoot. In addition, if you want to contribute to the development of the SDKs, they are all open source and available on GitHub. SDK for Java Python SDK Ruby SDK Go SDK

• Question 29:

  A programmer Is developing a Node is application which will run in a Linux server on their on-premises data center. This application will access various Oracle Cloud Infrastructure (OC1) services using OCI SDKs. What is the secure way to access OCI services with OCI Identity and Access Management (JAM)?

  A. Create a new OCI IAM user associated with a dynamic group and a policy that grants the desired permissions to OCI services. Add the on-premises Linux server in the dynamic group.
  B. Create an OCI IAM policy with the appropriate permissions to access the required OCI services and assign the policy to the on-premises Linux server.
  C. Create a new OCI IAM user, add the user to a group associated with a policy that grants the desired permissions to OCI services. In the on-premises Linux server, generate the keypair used for signing API requests and upload the public key to the IAM user.
  D. Create a new OCI IAM user, add the user to a group associated with a policy that grants the desired permissions to OCI services. In the on-premises Linux server, add the user name and password to a file used by Node.js authentication.
  C. Create a new OCI IAM user, add the user to a group associated with a policy that grants the desired permissions to OCI services. In the on-premises Linux server, generate the keypair used for signing API requests and upload the public key to the IAM user.

  ---

  Before using Oracle Functions, you have to set up an Oracle Cloud Infrastructure API signing key. The instructions in this topic assume:

  -you are using Linux

  - you are following Oracle's recommendation to provide a passphrase to encrypt the private key For more Detials Set up an Oracle Cloud Infrastructure API Signing Key for Use with Oracle Functions

  https://docs.cloud.oracle.com/en-us/iaas/Content/Functions/Tasks/functionssetupapikey.htm

• Question 30:

  You are working on a cloud native e-commerce application on Oracle Cloud Infrastructure (OCI). Your application architecture has multiple OCI services, including Oracle Functions. You need to trigger these functions directly from other OCI services, without having to run custom code. Which OCI service cannot trigger your functions directly?

  A. OCI Events Service
  B. OCI Registry
  C. OCI API Gateway
  D. Oracle Integration
  B. OCI Registry

  ---

  Oracle Functions is a fully managed, multi-tenant, highly scalable, on-demand, Functions-as-a- Service platform. It is built on enterprise-grade Oracle Cloud Infrastructure and powered by the Fn Project open source engine. Use Oracle

  Functions (sometimes abbreviated to just Functions) when you want to focus on writing code to meet business needs. The serverless and elastic architecture of Oracle Functions means there's no infrastructure administration or software

  administration for you to perform. You don't provision or maintain compute instances, and operating system software patches and upgrades are applied automatically. Oracle Functions simply ensures your app is highly-available, scalable,

  secure, and monitored. With Oracle Functions, you can write code in Java, Python, Node, Go, and Ruby (and for advanced use cases, bring your own Dockerfile, and Graal VM).

  You can invoke a function that you've deployed to Oracle Functions from:

  -

  The Fn Project CLI.

  -

  The Oracle Cloud Infrastructure SDKs.

  -

  Signed HTTP requests to the function's invoke endpoint. Every function has an invoke endpoint.

  -

  Other Oracle Cloud services (for example, triggered by an event in the Events service) or from external services. so You can then deploy your code, call it directly or trigger it in response to events, and get billed only for the resources consumed during the execution. Below are the oracle services that can trigger Oracle functions -Events Service -Notification Service -API Gateway Service -Oracle Integration service(using OCI Signature Version 1 security policy) so OCI Registry services cannot trigger your functions directly