1z0-1109-23 Revolutionary Guide To Exam Oracle Dumps [Q23-Q43]

1z0-1109-23 Oracle

admin -

April 4, 2024

5/5 - (3 votes)

1z0-1109-23 Revolutionary Guide To Exam Oracle Dumps

1z0-1109-23 Free Study Guide! with New Update 102 Exam Questions

Oracle 1z0-1109-23 Exam Syllabus Topics:

Topic	Details
Topic 1	Evaluate and configure security for container images used in OCI Create and configure various deployment strategies
Topic 2	Evaluate and configure security within OCI DevOps CI CD pipelines Recall and list the practices associated with DevOps
Topic 3	Explain the Configuration Management process Explain DevSecOps and configure security using DevSecOps best practices in OCI
Topic 4	Evaluate and configure security within OCI OKE service Provision, configure, and manage infrastructure using code and templates
Topic 5	Evaluate and configure Build Pipelines and Deployment Pipelines Use DevOps as a service to solve a real-world problem

NEW QUESTION 23
Using the Oracle Cloud Infrastructure (OCI) Vault service, you created a secret and rotated. one time. The current version state shows: Version Number : 2 (latest) | Status: Cur-rent Version Number: 1 | Status:
Previous In order to rollback to version 1, what should you do?

Deprecate version 2 (latest). Create new Secret Version 3. Create soft link from version 3 to version 1.

From the version 1 menu, select “Promote to Current”.

Create a new secret version 3 and set it to Pending. Copy the contents of Version 1 into version 3.

From the version 2 (latest) menu, select “Rollback…” and select version 1 when given the option.

NEW QUESTION 24
How do OCI DevOps deployment pipelines reduce risk and complexity of production applications?

By eliminating downtime of production applications

By reducing change-driven errors introduced by manual deployments

By working with existing Git repositories and Cl systems

By scaling builds with service-managed build runners

NEW QUESTION 25
Your customer has deployed their microservices based application on Oracle Container Engine for Kubernetes (OKE) and they are using Oracle Cloud Infrastructure Registry (OCIR) service as their Docker image repository. They have deployed the OKE cluster using the ‘custom create’ option, and their Virtual Cloud Network (VCN) has three public subnets with associated route tables, security lists, and an internet gateway.
They are facing an issue where their application containers are falling to deploy. Upon investigation, they learn that the images are not getting pulled from the designated OCIR repository. The YAML configuration has the correct path to the images. What is a valid concern that needs to be further investigated?

The OKE cluster needs to have a secret with credentials of their OCIR repository and use that secret in the Kubernetes deployment manifest.

They need to add IAM credentials for each user that deploys applications to the OKE cluster.

The VCN hosting the OKE cluster worker nodes needs to have a NAT gateway to access OCIR repositories.

They need to add a security list rule for TCP port 22 to connect to the OCIR service.

NEW QUESTION 26
A small company is moving to a DevOps framework to better accommodate their intermittent workloads, which are dynamic and irregular. They want to adopt a consumption-based pricing model. Which Oracle Cloud Infrastructure service can be used as a target deployment environment?

Bare metal compute instance

Virtual machine compute instance

Functions

Oracle Kubernetes (OKE)

NEW QUESTION 27
You are a DevOps engineer who has recently joined a new department. You have created 10 Terraform stacks using Oracle Cloud Infrastructure (OCI) Resource Manager. Each stack creates a different set of resources in OCI for your development team. What determines the cost of these Terraform stacks?

Resource Manager stacks are free but you are charged for the resources they create.

The cost depends on the number of lines of text in your Terraform configuration files.

The cost for each stack will be higher for a Pay As You Go subscription than for monthly flex billing.

The cost depends on the length of time it takes to build each resource using these Terraform stacks.

NEW QUESTION 28
You have a stack in Oracle Cloud Infrastructure (OCI) Resource Manager that is co-managed by multiple teams. Which statement is true?

The resources in the stack can still be edited or destroyed through the OCI console, causing Resource Manager’s state to be out of sync.

The resources in the stack can no longer be edited or destroyed through the Terraform CLI on a local machine.

Resources provisioned by Resource Manager can only be managed through Resource Manager, preventing the state from becoming out of sync.

The Terraform state may become corrupted if multiple people attempt Apply jobs in Resource Manager simultaneously.

NEW QUESTION 29
Which two statements are INCORRECT with respect to a Dockerfile? (Choose two.)

An ENV instruction sets the environment value to the key, and it is available for the subsequent build steps and in the running container as well.

The RUN instruction will execute any commands in a new layer on top of the current image and commit the results.

WORKDIR instruction sets the working directory for any RUN, CMD, ENTRY-POINT instructions and not for COPY and ADD instructions in the Dockerfile.

If CMD instruction provides default arguments for the ENTRYPOINT instruction, both should be specified in JSON format.

The COPY instruction copies new files, directories, or remote file URLS from <src> and adds them to the filesystem of the image at the path <dest>.

NEW QUESTION 30
A company has an Oracle Cloud Infrastructure (OCI) DevOps deployment pipeline set up in US East (us-ashburn 1) region, but they want to deploy an application in Japan Central (ap-osaka-1). How can they deploy their application in the ap-osaka-1 region with the deployment pipeline set up in the us ashburn-1 region in the most efficient manner?

Deploy application in us-ashburn-1 and duplicate the same in ap-osaka-1.

It is not possible to use the same deployment pipeline across regions.

Create another deployment pipeline in ap-osaka-1 to connect to the deployment pipeline in us ashburn-1

Deploy directly in ap-osaka-1 from the us-ashburn-1 deployment pipeline.

NEW QUESTION 31
A DevOps engineer is asked to access an Oracle Cloud Infrastructure Container Engine for Kubernetes (OKE) cluster to deploy new applications and manage existing ones. Which three statements are true? (Setting Up Cluster Access). (Choose three.)

When a cluster’s Kubernetes API endpoint has a public IP address, you can access the cluster in Cloud Shell by setting up a kubeconfig file

You cannot setup Cloud shell access to the cluster if the clusters Kubernetes API end-point has a private IP address.

Generating an API signing key pair is a mandatory step while setting up cluster access using local machine if the public key is not already uploaded in the console.

To access the cluster using kubectl you have to set up a Kubernetes configuration file for the cluster.
The kubeconfig file by default is named config and stored in the $HOME/.kube directory.

To access the cluster using kubectl you have to set up a Kubernetes manifest file for the cluster. The kubeconfig file by default is named config and stored in the $HOME/.manifest directory

NEW QUESTION 32
As a DevOps engineer, you are tasked with creating stages for an Oracle Kubernetes Engine (OKE) deployment pipeline in OCI DevOps. Your goal is to include as many actions as possible within the deployment pipeline stages themselves. Which two stages can you add to achieve this goal?

Add a stage to deliver artifacts to an Oracle Cloud Infrastructure (OCI) Artifact Regis-try.

Add a stage to deploy incrementally to multiple OKE target environments.

Add a stage to deploy based on Blue-Green strategy or Canary strategy to OKE environment.

Add a stage to apply the container image to the Kubernetes cluster

Add a stage to apply the Kubernetes manifest to the Kubernetes cluster.

NEW QUESTION 33
You are tasked with creating and managing a microservices-based application using Oracle Cloud Infrastructure Registry (OCIR). Which three statements accurately describe OCIR capabilities?

You can create up to 500 repositories in Oracle Cloud Infrastructure Registry, consuming a maximum of
500 GB in total, in every enabled region of your tenancy.

Container Registry can be used as a public docker registry, allowing any internet user with the appropriate URL knowledge to pull images from public repositories.

In each region that is enabled for your tenancy, you are charged for stored images and managed OCIR services.

When intending to push images to the root compartment, creating an empty repository in advance is not strictly necessary.

Docker images and manifest lists (also known as multi-architecture images) can be stored in Oracle Cloud Infrastructure Registry as long as they adhere to Open Container Initiative specifications. Helm charts aren’t included.

NEW QUESTION 34
While adding variables to your build_spec.yaml file, you made a mistake that resulted in a failed build pipeline. What is the error you could have made?

Used vaultVariable to hold the content of the vault secrets in OCID format

Defined variables as exportedVariables to make them available in subsequent stages of the same pipeline

Defined parameters such as the $ (VARIABLE_NAME) file and later assigned their values in the Parameters tab of the build pipeline

Defined a field such as type: DOCKER IMAGE in the outputArtifacts: section to specify the docker image produced by the Build stage

NEW QUESTION 35
You’re using Oracle Cloud Infrastructure (OCI) DevOps to deploy your application on an Oracle Container Engine for Kubernetes (OKE) environment. You push your code to the OCI Code Repository, add a stage and configure the build pipeline. When you run the build, you see “unable to clone the repository” error. What could the configuration error be?

More stages were added than required to the build pipeline.

Source files are connected directly to the build pipeline.

Dynamic Groups access and OCI IAM policies to the code repository are not set.

Artifacts and build spec are removed before running the build.

NEW QUESTION 36
As an engineer working on containerizing your application on the OCI platform, which two statements are true about OCI container instances?

The amount of time the container instance waits for the OS to shut down before power-ing off is managed internally.

The image source for a container instance can only be selected from Oracle Cloud Infrastructure Registry (also known as Container Registry), which is an Oracle-managed registry that enables you to store, share, and manage container images.

While configuring container instances, you can set the environmental variables used by the container.

You can configure the number of resources that the container consumes in absolutes or percentages.

By default, the container can use only 50% of resources in the container instance.

NEW QUESTION 37
A company wants to implement CI/CD automation process on Oracle Cloud Infrastructure (OCI) DevOps. An automatic trigger is created in such a way that when someone pushes the code from a Git repository to the OCI Code Repository, it trigger builds all the way to the deployment pipeline. Which DevOps IAM policy statements are required for this automation?

Code Repo: Allow dynamic group <Code Repository> to manage all resources in compartment compartment name>; Build Pipeline: Allow dynamic-group <BuildPipeline> to manage all-resources in compartment compartment name>

No DevOps IAM policy statements are required.

Build Pipeline: allow dynamic-group <BuildPipeline> to manage all-resources in compartment
<compartment names>

Code Repo: Allow dynamic-group <Code Repository> to manage all-resources in compartment
<compartment name>; Build Pipeline: Allow dynamic-group <BuildPipelines to manage all-resources in Compartment compartment name>; Deployment Pipeline: allow dynamic-group <Deployment Pipeline> to manage all resources in compartment scompartment name>

NEW QUESTION 38
As a DevOps Engineer, you need to develop a web app for a company. The web app should support users using mobile browsers and native mobile applications. You need to recommend an architecture which can be easily upgraded, deployed independently and resilient to failures. Which TWO recommendations should you consider? (Choose two.)

Use independent service which can be replaced or updated without any impact on the web app

Prefer Monolithic web app over microservices

Build the web app as one unit and use container technology for deployment

Avoid long duration commitment to a technology stack using microservice architecture

NEW QUESTION 39
A development team leveraging the Oracle Cloud Infrastructure DevOps service is having trouble getting their build pipeline to complete successfully. Which two situations might be the problem? (Choose two.)

Their source code and Kubernetes manifest are in different Git repositories.

The build spec.yaml file is in the root directory of their Git repository, and they didn’t specify a path to it.

They forgot to export a required variable in the build_spec.yaml file.

Their build specification file is available in a different directory of their Git repository, and there is no reference to its location.

They did not export a vault variable in the vaultVariables section of the build_spec.yaml file.

NEW QUESTION 40
You are working on a DevOps project to deploy Oracle Cloud Infrastructure (OCI) compute instances running web services. The development team indicated that when the compute Instances are deployed, it should automatically create OCI Object Storage buckets with respective instance names. Which two can help you meet this requirement?

Cloud Agent Plugin for the compute instance

Events Service

Oracle Functions

OCI CLI command “oci oj bucket create –auto <value>”

Service Connector Hub

NEW QUESTION 41
You are creating stages for an Oracle Kubernetes Engine (OKE) deployment pipeline and would like to include as many actions as possible within the pipeline stages themselves. What are you able to include?

Add a stage to apply the container image to the Kubernetes cluster.

Add a stage to apply the Kubernetes manifest to the Kubernetes cluster.

Add a stage to deliver artifacts to an Oracle Cloud Infrastructure (OCI) Artifact Regis-try.

Add a stage to deploy incrementally to multiple OKE target environments.

NEW QUESTION 42
Which two changes to infrastructure with the Oracle Cloud Infrastructure (OCI) Provider for Terraform will NOT result in any resources being destroyed or provisioned? (Choose two.)

changing the image OCID of a compute instance

changing the shape of a compute instance

adding a subnet to a VCN

adding a CIDR block to a VCN

changing the Display Name of a compute instance

NEW QUESTION 43
You are a security administrator for your company’s Oracle Cloud Infrastructure (OCI) ten-ancy. Your storage administrator tells you that they cannot associate an encryption key from OCI Vault to an Object Storage bucket in a new compartment, what is the reason?

The storage administrator forgot to select “Oracle Managed” while creating the bucket.

The resource bucket policy lacks the necessary Access Control List (ACL).

The secret for the key was not created beforehand.

There is no Identity and Access Management (IAM) policy allowing the Object Store service to use the Vault key.