[Jan-2025] Updated Oracle Cloud 1z0-1084-24 Exam Questions BUNDLE PACK [Q30-Q49]

Rate this post

[Jan-2025] Updated Oracle Cloud 1z0-1084-24 Exam Questions BUNDLE PACK

Master The Oracle Content 1z0-1084-24 EXAM DUMPS WITH GUARANTEED SUCCESS!

Oracle 1z0-1084-24 Exam Syllabus Topics:

Topic	Details
Topic 1	Cloud Native Fundamentals: This section tests the ability of cloud developers and architects to understand the core principles of cloud native development. Candidates are expected to explain the fundamentals of cloud native and discuss the key pillars that support cloud native approaches.
Topic 2	Cloud Native Applications and Containerization: Candidates must demonstrate their knowledge of Docker, including its architecture and components, to effectively manage containerized applications. This includes using Oracle Cloud Infrastructure Registry (OCIR) to pull and push container images.
Topic 3	Testing and Securing Cloud Native Applications: Cloud engineers and developers are tested on their ability to analyze and evaluate cloud native testing methodologies, developing effective strategies for testing applications in a cloud-native environment.
Topic 4	Monitoring & Troubleshooting Cloud Native Applications: This section assesses candidates’ skills in monitoring and troubleshooting cloud native applications. They must utilize the OCI Monitoring service to view metrics and the OCI Logging service to manage and search logs effectively.
Topic 5	Leveraging Serverless Technologies for Cloud Native Development: This part of the exam evaluates the ability to develop serverless applications using Oracle Functions. Candidates should be able to create API gateways to manage traffic from API clients and route it to back-end services, as well as establish integrations between systems using the OCI streaming service.

QUESTION 30
You are building a container image and pushing it to Oracle Cloud Infrastructure Registry (OCIR). You need to ensure that these images never get deleted from the repository. Which action should you take?

Write a policy to limit access to the specific repository in your compartment.

Create a group and assign a policy to perform lifecycle operations on images.

Set global policy of image retention to “Retain All Images”.

Edit the tenancy global retention policy.

QUESTION 31
Which TWO are characteristics of microservices? (Choose two.)

Microservices communicate over lightweight APIs.

Microservices can be implemented in limited number of programming languages.

All microservices share a data store.

Microservices are hard to test in isolation.

Microservices can be independently deployed.

QUESTION 32
You need to push a new Docker container image to a repository in the Oracle Cloud Infrastructure (OCI) Registry. Which mechanism must you use to provide authentication?

Generate an API signing key to complete the authentication via the Docker CLI.

Generate an Auth Token to complete the authentication via the OCI CLI.

Generate an API signing key to complete the authentication via the OCI CLI.

Generate an Auth Token to complete the authentication via the Docker CLI.

QUESTION 33
Which one of the following is NOT a valid backend-type supported by Oracle Cloud Infrastructure (OCI) API Gateway?

STOCK_RESPONSE_BACKEND

HTTP BACKEND

ORACLE_FUNCTIONS_BACKEND

ORACLE_STREAMS_BACKEND

QUESTION 34
Which testing strategy achieves high velocity of deployments and releases of cloud native applications?
(Choose the best answer.)

Penetration testing

Automated testing

Integration testing

A/B testing

QUESTION 35
Your team has been tasked with debugging a Cloud Native application developed using the following Oracle Cloud Infrastructure (OCI) services: Object Storage, Events, Functions, API Gateway, and Autonomous Database. Which of these is NOT a valid option for troubleshooting issues in OCI? (Choose the best answer.)

View service metric information from the OCI Monitoring service.

Configure the application to send logs to the OCI Logging service.

Use OCI Service Connector Hub to configure a service connector to automatically send logs to the OCI Logging Analytics service.

Trace performance issues In the Application Performance Monitoring service by enabling Function traces.

Leverage OCI Cloud Guard to extract and visualize the debug logs generated by your application.

QUESTION 36
Which kubectl command syntax is valid for implementing a rolling update deployment strategy in Kubernetes? (Choose the best answer.)

kubectl upgrade -c <container> –image=image:v2

kubectl update <deployment-name> –image=image:v2

kubectl rolling-update <deployment-name> –image=image:v2

kubectl update -c <container> –iniage=image: v2

QUESTION 37
Your organization has deployed their e-commerce application on Oracle Container Engine for Kubernetes (OKE) and they are using the Oracle Cloud Infrastructure Registry (OCIR) service as their Docker image repository. They have deployed the OKE cluster using the ‘custom create’ option, and their Virtual Cloud Network (VCN) has three public subnets with associated Route Tables, Security Lists, and Internet Gateway.
However, their application containers are failing to deploy. On investigation, they discover that the images are not being pulled from the designated OCIR repository, even though the YAML configuration has the correct path to the images. What is a valid concern here that needs to be further investigated?

Security List rule for TCP port 22 needs to be added to connect to the OCIR service.

VCN hosting the OKE cluster worker nodes needs to have a NAT gateway to access OCIR repositories.

Identity and Access Management (IAM) credentials need to be added for each user that deploys applications to the OKE cluster.

OKE cluster needs to have a secret with the credentials of their OCIR repository and use that secret in the Kubernetes deployment manifest.

QUESTION 38
You developed a microservices-based application that runs in an Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) cluster. Your security team wants to use SSL termination for this application.
What should you do to create a secure SSL termination for this application using the fewest steps possible?

Create a self-signed certificate and its corresponding key. Create a Kubernetes secret using the certificate and the key. Then add these annotations to the Kubernetes service: annotations: service.beta.
kubernetes.io/oci-load-balancer-ssl-ports: “443” service.beta.kubernetes.io/oci-load-balancer-tls-secret:
ssl certificate-secret

Add these annotations to the kubernetes service: annotations: service.beta.kubernetes.io/oci-load- balancer-ssl-ports: “443” service.beta.kubernetes.io/oci-load-balancer-ssl-secret-key: ssl secret-key

Generate a self-signed certificate using Let’s Encrypt. Use that certificate on OCI Load Balancer. Create the Kubernetes service using this load balancer.

The correct answer is: “Create a self-signed certificate and its corresponding key. Create a Kubernetes secret using the certificate and the key. Then add these annotations to the Kubernetes service: annotations: service.
beta.kubernetes.io/oci-load-balancer-ssl-ports: ‘443’ service.beta.kubernetes.io/oci-load-balancer-tls-secret: ssl certificate-secret.” To create a secure SSL termination for your microservices-based application running in an OCI Container Engine for Kubernetes (OKE) cluster, you can follow these steps: Create a self-signed certificate and its corresponding key: Generate a self-signed SSL certificate and its private key using a tool like OpenSSL. Create a Kubernetes secret: Create a Kubernetes secret using the certificate and key obtained in the previous step. This secret will securely store the certificate and key within the Kubernetes cluster. Add annotations to the Kubernetes service: Modify the Kubernetes service that exposes your application and add the following annotations to enable SSL termination: annotations: service.beta.kubernetes.io/oci-load- balancer-ssl-ports: ‘443’ (specify the SSL port as 443) annotations: service.beta.kubernetes.io/oci-load- balancer-tls-secret: ssl certificate-secret (specify the name of the Kubernetes secret containing the certificate and key) By following these steps, you can create a secure SSL termination for your application using a self- signed certificate and Kubernetes secret. The annotations added to the Kubernetes service ensure that the SSL port is configured correctly and the TLS secret is utilized for SSL termination when traffic reaches the load balancer. The other options provided are not the most suitable approaches for achieving secure SSL termination in an OCI Container Engine for Kubernetes (OKE) cluster: Adding annotations related to the OCI load balancer SSL secret key is not the correct approach for SSL termination in this scenario. Using Let’s Encrypt to generate a self-signed certificate and configuring it on the OCI Load Balancer is not necessary when you can create and manage the SSL certificate within the Kubernetes cluster using a Kubernetes secret.

QUESTION 39
Which testing measure should be considered when using test cases that simultaneously validate a deployment and perform a selected set of functional tasks?

Resource Utilization

Functionality

Scalability

Robust Deployment

Resiliency

QUESTION 40
Which term describes a group formed by a master machine and a worker machine in a Kubernetes architecture?

Cluster

Node

Deployment

Container

Pod

QUESTION 41
Your team has chosen to use master encryption key (MEK) within an Oracle Cloud Infrastructure (OCI) Vault for encrypting Kubernetes secrets associated with your microservice deployments in OCI Container Engine for Kubernetes (OKE) clusters so that you can easily manage key rotation. Which of the following is NOT valid about rotating keys in the OCI Vault service?

Once rotated, older key versions can be used for encryption until they are deleted.

Both software and HSM-protected MEKS can be rotated.

When you rotate an MEK, a new key version is automatically generated.

Each key version is tracked internally with separate unique OCIDS.

QUESTION 42
What is the difference between blue/green and canary deployment strategies? (Choose the best answer.)

In blue/green, current applications are slowly replaced with new ones. In canary, the application Is deployed Incrementally to a select group of people.

In blue/green, both old and new applications are in production at the same time. In canary, the application Is deployed incrementally to a select group of people.

In blue/green, current applications are slowly replaced with new ones. In canary, both old and new applications are in production at the same time.

In blue/green, the application Is deployed In minor Increments to a select group of people. In canary, both old and new applications are simultaneously in production.

QUESTION 43
A DevOps engineer is troubleshooting the Meshifyd application, which is running in an Oracle Cloud Infrastructure (OCI) environment. The engineer has set up the OCI Logging service to store access logs for the application but notices that the logs from the Meshifyd application are not showing up in the logging service. The engineer suspects that there might be an issue with the logging configuration. Which two statements are potential reasons for logs from the Meshifyd application not showing up in the OCI Logging service?

The logconfig.json file has incorrect or missing OCID for the custom log in the logobjectId field.

The OCI Logging service is set up to pre access logs by creating a log group and custom log within the same compartment.

The logconfig.json file has incorrect or missing information in the application namespace in the paths field.

The logconfig.json file has incorrect or missing information in the application namespace in the src field.

The logconfig.json file has incorrect or missing OCID for the custom log group in the logGroupObjectId field.

QUESTION 44
What is the maximum execution time of Oracle Functions?

240 seconds

300 seconds

60 seconds

120 seconds

QUESTION 45
Which feature is typically NOT associated with Cloud Native?

Immutable Infrastructure

Declarative APIs

Containers

Application Servers

Service Meshes

QUESTION 46
Having created a Container Engine for Kubernetes (OKE) cluster, you can use Oracle Cloud Infrastructure (OCI) Logging to view and search the logs of applications running on the worker node compute instances in the cluster. Which task is NOT required to collect and parse application logs? (Choose the best answer.)

Create a dynamic group with a rule that includes all worker nodes In the cluster.

Set the OCI Logging option to Enabled for the cluster.

Enable monitoring for all worker nodes in the cluster.

Configure a custom log in OCI Logging with the appropriate agent configuration.

QUESTION 47
A Docker image consists of one or more layers, each of which represents a Dockerfile instruction. The layers are stacked and each one is a delta of the changes from the previous layer. What permission is associated with these layers?

read mostly

write only

movable

read only

write once

QUESTION 48
As a Cloud Native developer, you have written a web service for your company. However, your security team has suggested that your web service should address Distributed Denial-of-Service (DDoS) attack. You are time-constrained and you need to ensure that this is implemented as soon as possible. What should you do in this scenario? (Choose the best answer.)

Use a third party service integration to Implement DDoS attack mitigation.

Re-write your web service and implement rate limiting.

Use the OCI Virtual Cloud Network (VCN) segregation to control DDoS.

Use the OCI API Gateway service and configure rate limiting.

QUESTION 49
You have a containerized application that requires access to an Autonomous Transaction Processing (ATP) Database. Which option is NOT valid when the container is deployed in an OKE cluster? (Choose the best answer.)

Use Kubernetes secrets to configure environment variables on the container with ATP instance OCID, and OCI API credentials. Then use the CreateConnection API endpoint from the service runtime.

Install the Oracle Cloud Infrastructure Service Broker on the Kubernetes cluster and deploy ServiceInstance and ServiceBinding resources for ATP. Then use the specified binding name as a volume in the application deployment manifest.

Create a Kubernetes secret with contents from the instance Wallet files. Use this secret to create a volume mounted to the appropriate path in the application deployment manifest.

Enable Oracle REST Data Services for the required schemas and connect via HTTPS.

The option that is not valid for connecting to an Autonomous Transaction Processing (ATP) Database from a container in Kubernetes is: Install the Oracle Cloud Infrastructure Service Broker on the Kubernetes cluster and deploy ServiceInstance and ServiceBinding resources for ATP. Then use the specified binding name as a volume in the application deployment manifest. The Oracle Cloud Infrastructure Service Broker is not used for connecting to an ATP Database from a container in Kubernetes. The Service Broker is used for provisioning and managing cloud services directly from Kubernetes. It allows you to create and manage instances of OCI services using Kubernetes resources like ServiceInstance and ServiceBinding. To connect to an ATP Database from a container in Kubernetes, you can use one of the following valid options: Enable Oracle REST Data Services for the required schemas and connect via HTTPS. This involves enabling and configuring Oracle REST Data Services (ORDS) for the schemas in the ATP Database. You can then connect to the ATP Database using RESTful endpoints provided by ORDS. Use Kubernetes secrets to configure environment variables on the container with ATP instance OCID and OCI API credentials. Then use the CreateConnection API endpoint from the service runtime. This approach involves configuring the necessary environment variables on the container to provide the ATP instance OCID and OCI API credentials. The application can then use the OCI SDK or REST API (such as the CreateConnection endpoint) to establish a connection to the ATP Database. Create a Kubernetes secret with contents from the instance Wallet files. Use this secret to create a volume mounted to the appropriate path in the application deployment manifest. This method involves creating a Kubernetes secret that contains the necessary credentials from the ATP Database’s instance wallet files. The secret can then be mounted as a volume in the application deployment, allowing the application to access the required credentials for connecting to the ATP Database. Both options 1 and 3 provide valid approaches for connecting to an ATP Database from a container in Kubernetes, depending on the specific requirements and preferences of the application.

Pass Oracle 1z0-1084-24 Exam – Experts Are Here To Help You: https://www.actualtorrent.com/1z0-1084-24-questions-answers.html

[Jan-2025] Updated Oracle Cloud 1z0-1084-24 Exam Questions BUNDLE PACK [Q30-Q49]

Oracle 1z0-1084-24 Exam Syllabus Topics:

Be the first to reply

Leave a Reply Cancel reply

Oracle 1z0-1084-24 Exam Syllabus Topics: