Oracle 1Z0-1084-24 Online Practice Questions and Exam Preparation

Oracle 1Z0-1084-24 Online Questions & Answers

• Question 61:

  To effectively test your cloud native applications for "unknown unknowns", you need to employ various testing and deployment strategies. Which strategy involves exposing new functionality or features to only a small set of users?

  A. A/B Testing
  B. Component Testing
  C. Blue/Green Deployment
  D. Canary Deployment
  D. Canary Deployment

• Question 62:

  A service you are deploying to Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) uses a docker image from a private repository in OCI Registry (OCIR). Which configuration is necessary to provide access to this repository from OKE?

  A. Create a docker-registry secret for OCIR with API key credentials on the cluster, and specify the imagePullSecret property in the application deployment manifest.
  B. Create a docker-registry secret for OCIR with identity Auth Token on the cluster, and specify the imagePullSecret property in the application deployment manifest.
  C. Create a dynamic group for nodes in the cluster, and a policy that allows the dynamic group to read repositories in the same compartment.
  D. Add a generic secret on the cluster containing your identity credentials. Then specify a registryCredentials property in the deployment manifest.
  B. Create a docker-registry secret for OCIR with identity Auth Token on the cluster, and specify the imagePullSecret property in the application deployment manifest.

• Question 63:

  You have a containerized application that requires access to an Autonomous Transaction Processing (ATP) Database. Which option is NOT valid when the container is deployed in an OKE cluster? (Choose the best answer.)

  A. Use Kubernetes secrets to configure environment variables on the container with ATP instance OCID, and OCI API credentials. Then use the CreateConnection API endpoint from the service runtime.
  B. Install the Oracle Cloud Infrastructure Service Broker on the Kubernetes cluster and deploy ServiceInstance and ServiceBinding resources for ATP. Then use the specified binding name as a volume in the application deployment manifest.
  C. Create a Kubernetes secret with contents from the instance Wallet files. Use this secret to create a volume mounted to the appropriate path in the application deployment manifest.
  D. Enable Oracle REST Data Services for the required schemas and connect via HTTPS.
  B. Install the Oracle Cloud Infrastructure Service Broker on the Kubernetes cluster and deploy ServiceInstance and ServiceBinding resources for ATP. Then use the specified binding name as a volume in the application deployment manifest.

• Question 64:

  As a Cloud Native developer, you develop two services in Node.js and deploy them to two different Container Engine for Kubernetes (OKE) clusters that use the same Virtual Cloud Network (VCN). Your security team wants to analyze the network communication between them. How can this requirement be met in the most cost-effective way?

  A. Rewrite the application and send the application logs to an outside log aggregator.
  B. Deploy a third-party logging service and aggregate the network flow logs.
  C. Use the OCI Logging service and enable VCN flow logs.
  D. Deploy Wireshark and intercept the packets.
  C. Use the OCI Logging service and enable VCN flow logs.

• Question 65:

  What is the open source engine for Oracle Functions?

  A. Fn Project
  B. Apache OpenWhisk
  C. OpenFaas
  D. Knative
  A. Fn Project

• Question 66:

  Oracle Functions monitors all deployed functions and collects and reports various metrics. Which is NOT available when viewing the Application metrics in the Oracle Cloud Infrastructure (OCI) Console?

  A. The length of time a function runs for.
  B. The number of retries made by the function before failing due to an error.
  C. The number of requests to invoke a function that failed due to throttling.
  D. The number of requests to invoke a function that failed with an error response.
  B. The number of retries made by the function before failing due to an error.

• Question 67:

  You have just finished building and compiling the software required to implement the API microservice component. You need to rebuild the API docker image, and plan to tag it as: ocIdevops/api:latest Which docker command would re-create the API docker image?

  A. docker build -t OCIdevops/api:latest
  B. docker create -t OCIdevops/api:latest
  C. docker image -t OCIdevops/api:latest
  D. docker compile -t OCI devops/api:latest
  A. docker build -t OCIdevops/api:latest

• Question 68:

  You are building a container image and pushing it to Oracle Cloud Infrastructure Registry (OCIR). You need to ensure that these images never get deleted from the repository. Which action should you take?

  A. Write a policy to limit access to the specific repository in your compartment.
  B. Create a group and assign a policy to perform lifecycle operations on images.
  C. Set global policy of image retention to "Retain All Images".
  D. Edit the tenancy global retention policy.
  D. Edit the tenancy global retention policy.

• Question 69:

  (CHK_1>3) You have an e-commerce application that loads customers' transactional data into the Oracle Cloud Infrastructure (OCI) Streaming service. The data must now be extracted and transformed before sending it to a third-party REST endpoint. You have been directed to leverage the OCI Service Connector Hub to automate this process. Which configuration option would address this requirement?

  A. Configure a new service connector as follows: ?Source: Streaming ?Task: Functions ?Target: Functions
  B. Configure a new service connector as follows: ?Source: Streaming ?Task: API Gateway ?Target: Notifications
  C. Configure a new service connector as follows: ?Source: Streaming ?Task: None ?Target: Notifications
  D. Configure a new service connector as follows: ?Source: Streaming ?Task: API Gateway ?Target: Functions
  E. Configure a new service connector as follows: ?Source: Streaming ?Task: Functions ?Target: API Gateway
  C. Configure a new service connector as follows: ?Source: Streaming ?Task: None ?Target: Notifications

• Question 70:

  Your organization has mandated that all deployed container images used for microservices must be signed by a specified master encryption key (MEK). You have appropriately signed the container images as part of your build process, but must now ensure that they are automatically verified when they are deployed to Oracle Cloud Infrastructure (OCI) Container Engine for Kubemetes (OKE) clusters. Which option should be used to mandate image verification when deploying to OKE clusters, assuming that MEK is already stored in an available OCI Vault? (Choose the best answer.)

  A. Enable image verification policies separately for each Kubemetes pod deployment because this is enforced at the pod level.
  B. Enable image verification policies separately for each node pool within each OKE cluster because this is enforced at the node pool level.
  C. Enable image verification policies separately for each OKE cluster because this is enforced at the cluster level.
  D. Enable Image verification policies for your OKE service control plane which will enforce this for all OKE clusters.
  C. Enable image verification policies separately for each OKE cluster because this is enforced at the cluster level.