Real 1z0-1084-23 Dumps - Oracle Correct Answers updated on 2024 [Q41-Q63]

NO.41 You have just finished building and compiling the software required to implement the API microservice component. You need to rebuild the API docker image, and plan to tag it as: ocIdevops/api:latest Which docker command would re-create the API docker image?

docker build -t OCIdevops/api:latest

docker create -t OCIdevops/api:latest

docker image -t OCIdevops/api:latest

docker compile -t OCI devops/api:latest

NO.42 Your organization has deployed their e-commerce application on Oracle Container Engine for Kubernetes (OKE) and they are using the Oracle Cloud Infrastructure Registry (OCIR) service as their Docker image repository. They have deployed the OKE cluster using the ‘custom create’ option, and their Virtual Cloud Network (VCN) has three public subnets with associated Route Tables, Security Lists, and Internet Gateway. However, their application containers are failing to deploy. On investigation, they discover that the images are not being pulled from the designated OCIR repository, even though the YAML configuration has the correct path to the images. What is a valid concern here that needs to be further investigated?

Security List rule for TCP port 22 needs to be added to connect to the OCIR service.

VCN hosting the OKE cluster worker nodes needs to have a NAT gateway to access OCIR repositories.

Identity and Access Management (IAM) credentials need to be added for each user that deploys applications to the OKE cluster.

OKE cluster needs to have a secret with the credentials of their OCIR repository and use that secret in the Kubernetes deployment manifest.

NO.43 Which of the following step is NOT required for setting up the Container Engine for Kubernetes (OKE) cluster access using a local installation of kubectl?

Set up the kubeconfig file.

Install and configure the Oracle Cloud Infrastructure (OCI) CLI.

Generate an API signing key pair (if you do not already have one) and upload the public key of the API signing key pair.

Generate Auth token from the OCI console to access the OKE cluster using kubectl.

NO.44 (CHK_4>3) Your development team decides to create and deploy some business logic to serverless Oracle Functions. You are asked to help facilitate the monitoring, logging, and tracing of these services. Which is NOT valid about troubleshooting Oracle Functions?

Oracle Functions invocation is enabled by default

Oracle Functions invocation logs are enabled at the application level.

Oracle Functions tracing is enabled at the function level.

Oracle Functions metrics are available at both the function and application level.

NO.45 You developed a microservices-based application that runs in an Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) cluster. Your security team wants to use SSL termination for this application.
What should you do to create a secure SSL termination for this application using the fewest steps possible?

Create a self-signed certificate and its corresponding key. Create a Kubernetes secret using the certificate and the key. Then add these annotations to the Kubernetes service: annotations:
service.beta.kubernetes.io/oci-load-balancer-ssl-ports: “443”service.beta.kubernetes.io/oci-load-balancer-tls-secret: ssl certificate-secret

Create a self-signed certificate and its corresponding key. Create a Kubernetes secret using the certificate and the key. Then add these annotations to the Kubernetes service: annotations:
service.beta.kubernetes.io/oci-load-balancer-ssl-ports: “443”
service.beta.kubernetes.io/oci-load-balancer-security-list management-mode: “Frontend”

Add these annotations to the kubernetes service: annotations:
service.beta.kubernetes.io/oci-load-balancer-ssl-ports: “443”
service.beta.kubernetes.io/oci-load-balancer-ssl-secret-key: ssl secret-key

Generate a self-signed certificate using Let’s Encrypt. Use that certificate on OCI Load Balancer. Create the Kubernetes service using this load balancer.

Explanation
The correct answer is: “Create a self-signed certificate and its corresponding key. Create a Kubernetes secret using the certificate and the key. Then add these annotations to the Kubernetes service: annotations:
service.beta.kubernetes.io/oci-load-balancer-ssl-ports: ‘443’
service.beta.kubernetes.io/oci-load-balancer-tls-secret: ssl certificate-secret.” To create a secure SSL termination for your microservices-based application running in an OCI Container Engine for Kubernetes (OKE) cluster, you can follow these steps: Create a self-signed certificate and its corresponding key: Generate a self-signed SSL certificate and its private key using a tool like OpenSSL. Create a Kubernetes secret: Create a Kubernetes secret using the certificate and key obtained in the previous step. This secret will securely store the certificate and key within the Kubernetes cluster. Add annotations to the Kubernetes service: Modify the Kubernetes service that exposes your application and add the following annotations to enable SSL termination:
annotations: service.beta.kubernetes.io/oci-load-balancer-ssl-ports: ‘443’ (specify the SSL port as 443) annotations: service.beta.kubernetes.io/oci-load-balancer-tls-secret: ssl certificate-secret (specify the name of the Kubernetes secret containing the certificate and key) By following these steps, you can create a secure SSL termination for your application using a self-signed certificate and Kubernetes secret. The annotations added to the Kubernetes service ensure that the SSL port is configured correctly and the TLS secret is utilized for SSL termination when traffic reaches the load balancer. The other options provided are not the most suitable approaches for achieving secure SSLtermination in an OCI Container Engine for Kubernetes (OKE) cluster:
Adding annotations related to the OCI load balancer SSL secret key is not the correct approach for SSL termination in this scenario. Using Let’s Encrypt to generate a self-signed certificate and configuring it on the OCI Load Balancer is not necessary when you can create and manage the SSL certificate within the Kubernetes cluster using a Kubernetes secret.

NO.46 You are developing a distributed application and you need a call to a path to always return a specific JSON content deploy an OCI API Gateway with the below API deployment specification. What is the correct value for type? { “routes” : [{ “path” : “/hello”, “methods” : [“Get”), “backend” : { “type” : ” —————- “, “status”: 200, “headers” : [{ “name” : “Content-Type”, “value” : “application/json” }] “body” : “{“myjson”:
“consistent response”}” }}]}

JSON_BACKEND

STOCK_RESPONSE_BACKEND

CONSTANT_BACKEND

HTTP_BACKEND

NO.47 You have a containerized application that requires access to an Autonomous Transaction Processing (ATP) Database. Which option is NOT valid when the container is deployed in an OKE cluster? (Choose the best answer.)

Use Kubernetes secrets to configure environment variables on the container with ATP instance OCID, and OCI API credentials. Then use the CreateConnection API endpoint from the service runtime.

Create a Kubernetes secret with contents from the instance Wallet files. Use this secret to create a volume mounted to the appropriate path in the application deployment manifest.

Install the Oracle Cloud Infrastructure Service Broker on the Kubernetes cluster and deploy ServiceInstance and ServiceBinding resources for ATP. Then use the specified binding name as a volume in the application deployment manifest.

Enable Oracle REST Data Services for the required schemas and connect via HTTPS.

Explanation
The option that is not valid for connecting to an Autonomous Transaction Processing (ATP) Database from a container in Kubernetes is: Install the Oracle Cloud Infrastructure Service Broker on the Kubernetes cluster and deploy ServiceInstance and ServiceBinding resources for ATP. Then use the specified binding name as a volume in the application deployment manifest. The Oracle Cloud Infrastructure Service Broker is not used for connecting to an ATP Database from a container in Kubernetes. The Service Broker is used for provisioning and managing cloud services directly from Kubernetes. It allows you to create and manage instances of OCI services using Kubernetesresources like ServiceInstance and ServiceBinding. To connect to an ATP Database from a container in Kubernetes, you can use one of the following valid options: Enable Oracle REST Data Services for the required schemas and connect via HTTPS. This involves enabling and configuring Oracle REST Data Services (ORDS) for the schemas in the ATP Database. You can then connect to the ATP Database using RESTful endpoints provided by ORDS. Use Kubernetes secrets to configure environment variables on the container with ATP instance OCID and OCI API credentials. Then use the CreateConnection API endpoint from the service runtime. This approach involves configuring the necessary environment variables on the container to provide the ATP instance OCID and OCI API credentials. The application can then use the OCI SDK or REST API (such as the CreateConnection endpoint) to establish a connection to the ATP Database. Create a Kubernetes secret with contents from the instance Wallet files. Use this secret to create a volume mounted to the appropriate path in the application deployment manifest. This method involves creating a Kubernetes secret that contains the necessary credentials from the ATP Database’s instance wallet files. The secret can then be mounted as a volume in the application deployment, allowing the application to access the required credentials for connecting to the ATP Database. Both options 1 and 3 provide valid approaches for connecting to an ATP Database from a container in Kubernetes, depending on the specific requirements and preferences of the application.

NO.48 You have two microservices, A and B, running in production. Service A relies on APIs from service B. You want to test changes to service A without deploying all of its dependencies, which include service B. Which approach should you take to test service A?

There is no need to explicitly test APIs.

Test against production APIs.

Test using API mocks.

Test the APIs in private environments.

NO.49 (CHK_1>3) You have an e-commerce application that loads customers’ transactional data into the Oracle Cloud Infrastructure (OCI) Streaming service. The data must now be extracted and transformed before sending it to a third-party REST endpoint. You have been directed to leverage the OCI Service Connector Hub to automate this process. Which configuration option would address this requirement?

Configure a new service connector as follows: * Source: Streaming * Task: None * Target: Notifications

Configure a new service connector as follows: * Source: Streaming * Task: Functions * Target: API Gateway

Configure a new service connector as follows: * Source: Streaming * Task: API Gateway * Target:Functions

Configure a new service connector as follows: * Source: Streaming * Task: Functions * Target:
Functions

Configure a new service connector as follows: * Source: Streaming * Task: API Gateway * Target:
Notifications

NO.50 You are developing a real-time monitoring application for a fleet of vehicles, which will be deployed on Oracle Cloud Infrastructure (OCI). You need to choose between using OCI Queue or OCI Streaming to handle the real-time data feeds from the vehicles. Based on the scenario described, which is the most appropriate choice for handling real-time data feeds?

OCI Queue, because it provides at-least-once message delivery, which is critical for real-time monitoring applications

OCI Queue, because it is optimized for low-latency messaging and ideal for real-time applications

OCI Streaming, because it is designed for high-volume, continuous ingestion and processing of data, making it the best choice for a fleet of vehicles

OCI Streaming, because it offers exactly-once message delivery, which is necessary for real-time applications

NO.51 To effectively test your cloud native applications for “unknown unknowns”, you need to employ various testing and deployment strategies. Which strategy involves exposing new functionality or features to only a small set of users?

Canary Deployment

Component Testing

A/B Testing

Blue/Green Deployment

NO.52 You are a developing a microservices application that will be a consumer of the Oracle CloudInfrastructure (OCI) Streaming service. Which API method should you use to read and process a stream?

GetMessages

GetStream

ReadMessages

ReadStream

ProcessStream

NO.53 You want to push a new image in the Oracle Cloud Infrastructure (OCI) Registry. Which TWO actions would you need to perform? (Choose two.)

Generate an API signing key to complete the authentication via Docker CLI.

Generate an auth token to complete the authentication via Docker CLI.

Assign an OCI defined tag via OCI CLI to the image.

Assign a tag via Docker CLI to the image.

Generate an OCI tag namespace in your repository.

NO.54 Who is responsible for patching, upgrading, and maintaining the worker nodes in Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE)? (Choose the best answer.)

Oracle Support

It is automated

The user

Independent Software Vendors

NO.55 To enforce mutual TLS (mTLS) authentication for clients of your microservices, your team has chosen to leverage the Oracle Cloud Infrastructure (OCI) API Gateway service to create new API Deployments that will direct requests to your microservices. Which is NOT valid regarding the mTLS options in OCI API Gateway?

Once the mTLS request policy is enabled, ALL requests with valid certificates are routed to the backend unless you have defined one or more particular values (such as a domain name).

Adding a custom certificate authority (CA) or custom CA bundle to your gateway’s trust store for mTLS is optional unless you need to reject certificates that do not contain particular values (such as a domain name).

Custom CA or custom CA bundles can be added to your gateway’s trust store ONLY if they already exist in the OCI Certificates service.

The mTLS request policy can only be enabled at the API deployment specification level, which then applies globally to ALL routes in that deployment.

NO.56 Which is NOT a valid option to execute a function deployed in Oracle Functions?

Invoke from the Docker CLI.

Invoke from the Fn Project CLI.

Trigger by an event in the Oracle Cloud Infrastructure (OCI) Events service.

Invoke from the OCI CLI.

Send signed HTTP requests to the function’s invoke endpoint.

NO.57 Your Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) administrator has created an OKE cluster with one node pool in a public subnet. You have been asked to provide a log file from one of the nodes for troubleshooting purpose. Which step should you take to obtain the log file?

SSH into the node using the public key.

It is impossible because OKE is a managed Kubernetes service.

SSH into the nodes using the private key.

Use the username opc and password to login.

NO.58 You are creating an API deployment in Oracle Cloud Infrastructure (OCI) API Gateway and you want to configure request policies to control access. Which is NOT available in OCI API Gateway?

Controlling access to the backend OCI resources.

Limiting the number of requests sent to the backend services.

Enabling Cross-Origin Resource Sharing (CORS) support.

Providing authentication and authorization.

NO.59 Which of the following is NOT a criterion that is usually met by a microservice?

Organized around business capabilities.

Tightly coupled

Highly maintainable

Independently deployable

NO.60 Oracle Functions monitors all deployed functions and collects and reports various metrics. Which is NOT available when viewing the Application metrics in the Oracle Cloud Infrastructure (OCI) Console?

The number of requests to invoke a function that failed with an error response.

The number of requests to invoke a function that failed due to throttling.

The number of retries made by the function before failing due to an error.

The length of time a function runs for.

NO.61 You developed a microservices-based application that runs in an Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) cluster. It has multiple endpoints that need to be exposed to the public internet.
What is the most cost-effective way to expose multiple application endpoints without adding unnecessary complexity to the application?

Use a NodePort service type in Kubernetes for each of your service endpoints using the node’s public IP address to access the applications.

Use a ClusterIP service type in Kubernetes for each of your service endpoints using a load balancer to expose the endpoints.

Deploy an Ingress Controller and use it to expose each endpoint with its own routing endpoint.

Create a separate load balancer instance for each service using the lowest 100 Mbps option.

NO.62 What are the TWO main reasons you would choose to implement a serverless architecture? (Choose two.)

Easier to run long-running operations

Improved in-function state management

Reduced operational cost

Automatic horizontal scaling

No need for integration testing

NO.63 A developer has created another version of a microservice and wants 10% of the traffic to flow towards it for testing purposes. The application is already configured using OCI (Oracle Cloud Infrastructure) Service Mesh. Which of the following steps is the right approach to achieve this goal?

Create a new Kubernetes deployment for the new version of the microservice and set the traffic splitting percentage to 10% in the Kubernetes service manifest.

Use Kubernetes HPA (Horizontal Pod Autoscaler) to scale the new version of the microservice to handle 10% of the traffic automatically.

Create a new entry in the routeRules field of the ingress gateway route table manifest to configure traffic splitting between the old and new versions of the microservice and set the percentage to 10%.

Create a new entry in the routeRules field of the virtual service route table manifest to configure traffic splitting between the old and new versions of the microservice and set the percentage to 10%.

Real 1z0-1084-23 Dumps – Oracle Correct Answers updated on 2024 [Q41-Q63]

Leave a Reply Cancel reply