Oracle 1Z0-1084-22 Online Practice Questions and Exam Preparation

Oracle 1Z0-1084-22 Online Questions & Answers

• Question 21:

  What is the open source engine for Oracle Functions?

  A. Apache OpenWhisk
  B. OpenFaaS
  C. Fn Project
  D. Knative
  C. Fn Project

  ---

  Explanation/Reference:

  https://www.oracle.com/webfolder/technetwork/tutorials/FAQs/oci/Functions-FAQ.pdf Oracle Functions is a fully managed, multi-tenant, highly scalable, on-demand, Functions-as-a- Service platform. It is built on enterprise-grade Oracle Cloud Infrastructure and powered by the Fn Project open source engine. Use Oracle Functions (sometimes abbreviated to just Functions) when you want to focus on writing code to meet business needs.

• Question 22:

  You are building a container image and pushing it to the Oracle Cloud Infrastructure Registry (OCIR). You need to make sure that these get deleted from the repository. Which action should you take?

  A. Create a group and assign a policy to perform lifecycle operations on images.
  B. Set global policy of image retention to "Retain All Images".
  C. In your compartment, write a policy to limit access to the specific repository.
  D. Edit the tenancy global retention policy.
  D. Edit the tenancy global retention policy.

  ---

  Explanation/Reference:

  Deleting an Image When you no longer need an old image or you simply want to clean up the list of image tags in a repository, you can delete images from Oracle Cloud Infrastructure Registry. Your permissions control the images in Oracle Cloud Infrastructure Registry that you can delete. You can delete images from repositories you've created, and from repositories that the groups to which you belong have been granted access by identity policies. If you belong to the Administrators group, you can delete images from any repository in the tenancy. Note that as well deleting individual images , you can set up image retention policies to delete images automatically based on selection criteria you specify (see Retaining and Deleting Images Using Retention Policies). Note: In each region in a tenancy, there's a global image retention policy. The global image retention policy's default selection criteria retain all images so that no images are automatically deleted.

  However, you can change the global image retention policy so that images are deleted if they meet the criteria you specify. A region's global image retention policy applies to all repositories in the region, unless it is explicitly overridden by one or more custom image retention policies. You can set up custom image retention policies to override the global image retention policy with different criteria for specific repositories in a region. Having created a custom image retention policy, you apply the custom retention policy to a repository by adding the repository to the policy. The global image retention policy no longer applies to repositories that you add to a custom retention policy.

• Question 23:

  Which is NOT a supported SDk Oracle Cloud Infrastructure (OCI)?

  A. Go SDK
  B. Java SDK
  C. NET SDK
  D. Ruby SDK
  E. Python SDK
  C. NET SDK

  ---

  Explanation/Reference:

  https://docs.cloud.oracle.com/en-us/iaas/Content/API/Concepts/sdks.htm

  Software Development Kits (SDKs) Build and deploy apps that integrate with Oracle Cloud Infrastructure services. Each SDK provides the tools you need to develop an app, including code samples and documentation to create, test, and troubleshoot. In addition, if you want to contribute to the development of the SDKs, they are all open source and available on GitHub. SDK for Java Python SDK Ruby SDK Go SDK

• Question 24:

  What is the minimum of storage that a persistent volume claim can obtain in Oracle Cloud Infrastructure Container Engine for Kubernetes (OKE)?

  A. 50 GB
  B. 10 GB
  C. 1 GB
  D. 1 TB
  A. 50 GB

  ---

  Explanation/Reference:

  The minimum amount of persistent storage that a PVC can request is 50 gigabytes. If the request is for less than 50 gigabytes, the request is rounded up to 50 gigabytes. https://docs.cloud.oracle.com/en-us/iaas/Content/ContEng/Tasks/contengcreatingpersistentvolumeclaim.htm

• Question 25:

  Which pattern can help you minimize the probability of cascading failures in your system during partial loss of connectivity or a complete service failure?

  A. Retry pattern
  B. Anti-corruption layer pattern
  C. Circuit breaker pattern
  D. Compensating transaction pattern
  C. Circuit breaker pattern

  ---

  Explanation/Reference:

  A cascading failure is a failure that grows over time as a result of positive feedback. It can occur when a portion of an overall system fails, increasing the probability that other portions of the system fail. the circuit breaker pattern prevents the service from performing an operation that is likely to fail. For example, a client service can use a circuit breaker to prevent further remote calls over the network when a downstream service is not functioning properly. This can also prevent the network from becoming congested by a sudden spike in failed retries by one service to another, and it can also prevent cascading failures. Self-healing circuit breakers check the downstream service at regular intervals and reset the circuit breaker when the downstream service starts functioning properly. https://blogs.oracle.com/developers/getting-started-with-microservices-part-three

• Question 26:

  You are working on a cloud native e-commerce application on Oracle Cloud Infrastructure (OCI). Your application architecture has multiple OCI services, including Oracle Functions. You need to trigger these functions directly from other OCI services, without having to run custom code. Which OCI service cannot trigger your functions directly?

  A. OCI Events Service
  B. OCI Registry
  C. OCI API Gateway
  D. Oracle Integration
  B. OCI Registry

  ---

  Explanation/Reference:

  Oracle Functions is a fully managed, multi-tenant, highly scalable, on-demand, Functions-as-a- Service platform. It is built on enterprise-grade Oracle Cloud Infrastructure and powered by the Fn Project open source engine. Use Oracle

  Functions (sometimes abbreviated to just Functions) when you want to focus on writing code to meet business needs. The serverless and elastic architecture of Oracle Functions means there's no infrastructure administration or software

  administration for you to perform. You don't provision or maintain compute instances, and operating system software patches and upgrades are applied automatically. Oracle Functions simply ensures your app is highly-available, scalable,

  secure, and monitored. With Oracle Functions, you can write code in Java, Python, Node, Go, and Ruby (and for advanced use cases, bring your own Dockerfile, and Graal VM).

  You can invoke a function that you've deployed to Oracle Functions from:

  -

  The Fn Project CLI.

  -

  The Oracle Cloud Infrastructure SDKs.

  -

  Signed HTTP requests to the function's invoke endpoint. Every function has an invoke endpoint.

  -

  Other Oracle Cloud services (for example, triggered by an event in the Events service) or from external services. so You can then deploy your code, call it directly or trigger it in response to events, and get billed only for the resources consumed during the execution. Below are the oracle services that can trigger Oracle functions -Events Service -Notification Service -API Gateway Service -Oracle Integration service(using OCI Signature Version 1 security policy) so OCI Registry services cannot trigger your functions directly

• Question 27:

  A leading insurance firm is hosting its customer portal in Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes with an OCI Autonomous Database. Their support team discovered a lot of SQL injection attempts and cross-site

  scripting attacks to the portal, which is starting to affect the production environment.

  What should they implement to mitigate this attack?

  A. Network Security Lists
  B. Network Security Groups
  C. Network Security Firewall
  D. Web Application Firewall
  D. Web Application Firewall

  ---

  Explanation/Reference:

  Oracle Cloud Infrastructure Web Application Firewall (WAF) is a cloud-based, Payment Card Industry (PCI) compliant, global security service that protects applications from malicious and unwanted internet traffic. WAF can protect any

  internet facing endpoint, providing consistent rule enforcement across a customer's applications.

  WAF provides you with the ability to create and manage rules for internet threats including Cross- Site Scripting (XSS), SQL Injection and other OWASP-defined vulnerabilities. Unwanted bots can be mitigated while tactically allowed desirable

  bots to enter. Access rules can limit based on geography or the signature of the request.

• Question 28:

  You have been asked to create a stateful application deployed in Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) that requires all of your worker nodes to mount and write data to persistent volumes. Which two OCI storage services should you use?

  A. Use OCI File Services as persistent volume.
  B. Use GlusterFS as persistent volume.
  C. Use OCI Block Volume backed persistent volume.
  D. Use open source storage solutions on top of OCI.
  E. Use OCI Object Storage as persistent volume.
  A. Use OCI File Services as persistent volume.
  C. Use OCI Block Volume backed persistent volume.

  ---

  Explanation/Reference:

  A PersistentVolume (PV) is a piece of storage in the cluster that has been provisioned by an administrator. PVs are volume plugins like Volumes, but have a lifecycle independent of any individual Pod that uses the PV. A PersistentVolumeClaim (PVC) is a request for storage by a user. It is similar to a Pod. Pods consume node resources and PVCs consume PV resources. If you intend to create Kubernetes persistent volumes, sufficient block volume quota must be available in each availability domain to meet the persistent volume claim. Persistent volume claims must request a minimum of 50 gigabytes You can define and apply a persistent volume claim to your cluster, which in turn creates a persistent volume that's bound to the claim. A claim is a block storage volume in the underlying IaaS provider that's durable and offers persistent storage, enabling your data to remain intact, regardless of whether the containers that the storage is connected to are terminated. With Oracle Cloud Infrastructure as the underlying IaaS provider, you can provision persistent volume claims by attaching volumes from the Block Storage service.

• Question 29:

  A developer using Oracle Cloud Infrastructure (OCI) API Gateway must authenticate the API requests to their web application. The authentication process must be implemented using a custom scheme which accepts string parameters from the API caller. Which method can the developer use In this scenario?

  A. Create an authorizer function using request header authorization.
  B. Create an authorizer function using token-based authorization.
  C. Create a cross account functions authorizer.
  D. Create an authorizer function using OCI Identity and Access Management based authentication
  B. Create an authorizer function using token-based authorization.

  ---

  Explanation/Reference:

  Having deployed the authorizer function, you enable authentication and authorization for an API deployment by including two different kinds of request policy in the API deployment specification:

  An authentication request policy for the entire API deployment that specifies:The OCID of the authorizer function that you deployed to Oracle Functions that will perform authentication and authorization.The request attributes to pass to the

  authorizer function.Whether unauthenticated callers can access routes in the API deployment.

  An authorization request policy for each route that specifies the operations a caller is allowed to perform, based on the caller's access scopes as returned by the authorizer function. Using the Console to Add Authentication and Authorization

  Request Policies To add authentication and authorization request policies to an API deployment specification using the Console:

  Create or update an API deployment using the Console, select the From Scratch option, and enter details on the Basic Information page. For more information, see Deploying an API on an API Gateway by Creating an API Deployment and

  Updating API Gateways and API Deployments. In the API Request Policies section of the Basic Information page, click the Add button beside Authentication and specify:

  Application in : The name of the application in Oracle Functions that contains the authorizer function. You can select an application from a different compartment. Function Name: The name of the authorizer function in

  Oracle Functions. Authentication Token: Whether the access token is contained in a request header or a query parameter.

  Authentication Token Value: Depending on whether the access token is contained in a request header or a query parameter, specify:

  Header Name: If the access token is contained in a request header, enter the name of the header. Parameter Name: If the access token is contained in a query parameter, enter the name of the query parameter.

  https://docs.cloud.oracle.com/en-us/iaas/Content/APIGateway/Tasks/apigatewayaddingauthzauthn.htm

• Question 30:

  Which statements is incorrect with regards to the Oracle Cloud Infrastructure (OCI) Notifications service?

  A. Notification topics may be assigned as the action performed by an OCI Events configuration.
  B. OCI Alarms can be configured to publish to a notification topic when triggered.
  C. An OCI function may subscribe to a notification topic.
  D. A subscription can forward notifications to an HTTPS endpoint.
  E. A subscription can integrate with PagerDuty events.
  F. It may be used to receive an email each time an OCI Autonomous Database backup is completed.
  F. It may be used to receive an email each time an OCI Autonomous Database backup is completed.