[Jan-2024] Pass 1z0-1084-23 Exam in First Attempt Updated 1z0-1084-23 Exam Questions [Q49-Q70]

1z0-1084-23 Oracle

admin -

January 21, 2024

4.7/5 - (4 votes)

[Jan-2024] Pass 1z0-1084-23 Exam in First Attempt Updated 1z0-1084-23 Exam Questions

Oracle Cloud Dumps 1z0-1084-23 Exam for Full Questions – Exam Study Guide

Oracle 1z0-1084-23 Exam Syllabus Topics:

Topic	Details
Topic 1	Explain cloud-native testing and discuss measures for testing cloud-native applications Develop and deploy containerized applications on OKE
Topic 2	Discuss the role of container orchestration Discuss various strategies for testing cloud-native applications
Topic 3	Explain docker and the concepts around its architecture and components Perform Tasks around Monitoring, Logging, and Tracing
Topic 4	Cloud Native Applications And Containerization Use OCI Logging service to enable, manage, and search logs
Topic 5	Facilitate asynchronous messaging for microservices with OCI Queue Leveraging Serverless Technologies for Cloud Native Development
Topic 6	Leverage OCI Service Mesh for Kubernetes Deployment Explain the microservices architecture and discuss the design methodology of microservices

NEW QUESTION 49
Which TWO statements are true for serverless computing and serverless architectures? (Choose two.)

Serverless function execution is fully managed by third party.

Applications running on a FaaS (Functions as a Service) platform.

Long running tasks are perfectly suited for serverless.

Application DevOps team is responsible for scaling.

Serverless function state should never be stored externally.

NEW QUESTION 50
Which is NOT a valid option to execute a function deployed in Oracle Functions?

Invoke from the Docker CLI.

Invoke from the Fn Project CLI.

Trigger by an event in the Oracle Cloud Infrastructure (OCI) Events service.

Invoke from the OCI CLI.

Send signed HTTP requests to the function’s invoke endpoint.

NEW QUESTION 51
Your Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) administrator has created an OKE cluster with one node pool in a public subnet. You have been asked to provide a log file from one of the nodes for troubleshooting purpose. Which step should you take to obtain the log file?

Use the username opc and password to login.

It is impossible because OKE is a managed Kubernetes service.

SSH into the nodes using the private key.

SSH into the node using the public key.

NEW QUESTION 52
Which of the following TWO statements are TRUE about deleting a Kubernetes cluster? (Choose two.)

Upon deleting a cluster, other resources created during the cluster creation process or associated with the cluster (such as VCNS, Internet Gateways, NAT Gateways, Route Tables, Security Lists, B. Load Balancers, and Block Volumes) are deleted automatically.

If you change the auto-generated name of a worker node and then delete the cluster, the renamed worker node is not deleted.

Upon deleting a cluster, no other resources created during the cluster creation process or associated with the cluster (such as VCNS. Internet Gateways, NAT Gateways, Route Tables, Security Lists. Load Balancers, and Block Volumes) are deleted automatically.

Changing the auto-generated name of a worker node does not affect the deletion of the worker node when the cluster in which it is created is deleted.

You cannot change the autogenerated names of the worker nodes in the format oke-c<part-of cluster- CCID>-<part-of-node-pool-OCID>-<part-of-subnet-OCID>-<slot> within a Kubernetes cluster.

NEW QUESTION 53
Your team has been tasked with debugging a Cloud Native application developed using the following Oracle Cloud Infrastructure (OCI) services: Object Storage, Events, Functions, API Gateway, and Autonomous Database. Which of these is NOT a valid option for troubleshooting issues in OCI? (Choose the best answer.)

View service metric information from the OCI Monitoring service.

Configure the application to send logs to the OCI Logging service.

Use OCI Service Connector Hub to configure a service connector to automatically send logs to the OCI Logging Analytics service.

Trace performance issues In the Application Performance Monitoring service by enabling Function traces.

Leverage OCI Cloud Guard to extract and visualize the debug logs generated by your application.

NEW QUESTION 54
Which of the following TWO statements are TRUE about deleting a Kubernetes cluster? (Choose two.)

You cannot change the autogenerated names of the worker nodes in the format oke-c<part-of cluster- CCID>-<part-of-node-pool-OCID>-<part-of-subnet-OCID>-<slot> within a Kubernetes cluster.

Upon deleting a cluster, other resources created during the cluster creation process or associated with the cluster (such as VCNS, Internet Gateways, NAT Gateways, Route Tables, Security Lists,B.Load Balancers, and Block Volumes) are deleted automatically.

Changing the auto-generated name of a worker node does not affect the deletion of the worker node when the cluster in which it is created is deleted.

If you change the auto-generated name of a worker node and then delete the cluster, the renamed worker node is not deleted.

NEW QUESTION 55
You have a containerized application that requires access to an Autonomous Transaction Processing (ATP) Database. Which option is NOT valid when the container is deployed in an OKE cluster? (Choose the best answer.)

Use Kubernetes secrets to configure environment variables on the container with ATP instance OCID, and OCI API credentials. Then use the CreateConnection API endpoint from the service runtime.

Install the Oracle Cloud Infrastructure Service Broker on the Kubernetes cluster and deploy ServiceInstance and ServiceBinding resources for ATP. Then use the specified binding name as a volume in the application deployment manifest.

Create a Kubernetes secret with contents from the instance Wallet files. Use this secret to create a volume mounted to the appropriate path in the application deployment manifest.

Enable Oracle REST Data Services for the required schemas and connect via HTTPS.

The option that is not valid for connecting to an Autonomous Transaction Processing (ATP) Database from a container in Kubernetes is: Install the Oracle Cloud Infrastructure Service Broker on the Kubernetes cluster and deploy ServiceInstance and ServiceBinding resources for ATP. Then use the specified binding name as a volume in the application deployment manifest. The Oracle Cloud Infrastructure Service Broker is not used for connecting to an ATP Database from a container in Kubernetes. The Service Broker is used for provisioning and managing cloud services directly from Kubernetes. It allows you to create and manage instances of OCI services using Kubernetes resources like ServiceInstance and ServiceBinding. To connect to an ATP Database from a container in Kubernetes, you can use one of the following valid options: Enable Oracle REST Data Services for the required schemas and connect via HTTPS. This involves enabling and configuring Oracle REST Data Services (ORDS) for the schemas in the ATP Database. You can then connect to the ATP Database using RESTful endpoints provided by ORDS. Use Kubernetes secrets to configure environment variables on the container with ATP instance OCID and OCI API credentials. Then use the CreateConnection API endpoint from the service runtime. This approach involves configuring the necessary environment variables on the container to provide the ATP instance OCID and OCI API credentials. The application can then use the OCI SDK or REST API (such as the CreateConnection endpoint) to establish a connection to the ATP Database. Create a Kubernetes secret with contents from the instance Wallet files. Use this secret to create a volume mounted to the appropriate path in the application deployment manifest. This method involves creating a Kubernetes secret that contains the necessary credentials from the ATP Database’s instance wallet files. The secret can then be mounted as a volume in the application deployment, allowing the application to access the required credentials for connecting to the ATP Database. Both options 1 and 3 provide valid approaches for connecting to an ATP Database from a container in Kubernetes, depending on the specific requirements and preferences of the application.

NEW QUESTION 56
Which two “Action Type” options are NOT available in an Oracle Cloud Infrastructure (OCI) Events rule definition? (Choose two.)

Streaming

Slack

Functions

Notifications

NEW QUESTION 57
Which open source engine is used by Oracle Cloud Infrastructure (OCI) to power Oracle Functions?

Apache OpenWhisk

Knative

Fn Project

Kubeless

NEW QUESTION 58
Which term describes a group formed by a master machine and a worker machine in a Kubernetes architecture?

Cluster

Node

Deployment

Container

Pod

NEW QUESTION 59
You are developing a serverless application with Oracle Functions and Oracle Cloud Infrastructure Object Storage. Your function needs to read a JSON file object from an Object Storage bucket named “input-bucket” in compartment “qa-compartment”. Your corporate security standards mandate the use of Resource Principals for this use case. Which two statements are needed to implement this use case? (Choose two.)

Set up the following dynamic group for your function’s OCID: Name: read-file-dg Rule: resource.id =
“ocid1.fnfunc.oc1.phx.aaaaaaaakeaobctakezjz5i4ujj7g25q7sx5m vr55pms6f4da’

No policies are needed. By default, every function has read access to Object Storage buckets in the tenancy.

Set up a policy to grant your user account read access to the bucket: allow user XYZ to read objects in compartment qa-compartment where target.bucket.name= “input-bucket’

Set up a policy to grant all functions read access to the bucket: allow all functions in compartment qa-compartment to read objects in target.bucket.name= “input-bucket’

Set up a policy with the following statement to grant read access to the bucket: allow dynamic-group read-file-dg to read objects in compartment qa- compartment where target.bucket.name= ‘input-bucket’

NEW QUESTION 60
How are cloud native application versions deployed to an OKE cluster when using a blue/green deployment strategy?

Current applications are slowly replaced with new application versions.

New application versions are deployed in minor increments to a select group of people.

Both old and new application versions are deployed to production at the same time.

NEW QUESTION 61
(CHK_4>3) Your development team decides to create and deploy some business logic to serverless Oracle Functions. You are asked to help facilitate the monitoring, logging, and tracing of these services. Which is NOT valid about troubleshooting Oracle Functions?

Oracle Functions invocation is enabled by default

Oracle Functions invocation logs are enabled at the application level.

Oracle Functions tracing is enabled at the function level.

Oracle Functions metrics are available at both the function and application level.

NEW QUESTION 62
A company is developing a new application that needs to process transactions in real time. The company wants to ensure that all transactions are processed in order and that no transaction is lost. Which of these is a correct strategy for leveraging OCI Queue in this scenario?

Use a separate queue for each type of transaction.

Use a single queue to process all transactions.

Use a separate queue for each application instance.

Use a priority queue to prioritize requests.

NEW QUESTION 63
You have created a repository in Oracle Cloud Infrastructure Registry (OCIR) in the us-ashburn-1 (iad) region in your tenancy with the heyoci namespace. Which three are valid tags for an image named myapp? (Choose three.)

iad.ocir.io/heyoci/myapp:0.0.2-beta

us-ashburn-1.ocir.io/myproject/heyoci/myapp:latest

iad.ccir.io/heyoci/myapp:latest

iad.ocir.io/heyoci/myproject/myapp:0.0.1

us-ashburn-1.ocir.io/heyoci/myapp:0.0.2-beta

us-ashburn-1.ocir.io/heyoci/myproject/myapp:0.0.2-beta

NEW QUESTION 64
In the shared responsibility model, who should perform patching, upgrading, and maintaining of the worker nodes in provisioned Oracle Container Engine for Kubernetes (OKE) clusters?

It is the responsibility of the customer.

It is an automated process.

Oracle Support does it.

NEW QUESTION 65
From a DevOps process standpoint, it is a good practice to keep changes to an application under version control. Which of the following allows changes to a Docker image to be stored in a version control system?

Updating docker-compose.yml

Executing docker commit

Executing docker save

Updating Dockerfile

NEW QUESTION 66
What is the difference between blue/green and canary deployment strategies? (Choose the best answer.)

In blue/green, current applications are slowly replaced with new ones. In canary, the application Is deployed Incrementally to a select group of people.

In blue/green, both old and new applications are in production at the same time. In canary, the application Is deployed incrementally to a select group of people.

In blue/green, current applications are slowly replaced with new ones. In canary, both old and new applications are in production at the same time.

In blue/green, the application Is deployed In minor Increments to a select group of people. In canary, both old and new applications are simultaneously in production.

NEW QUESTION 67
Your organization has deployed their e-commerce application on Oracle Container Engine for Kubernetes (OKE) and they are using the Oracle Cloud Infrastructure Registry (OCIR) service as their Docker image repository. They have deployed the OKE cluster using the ‘custom create’ option, and their Virtual Cloud Network (VCN) has three public subnets with associated Route Tables, Security Lists, and Internet Gateway.
However, their application containers are failing to deploy. On investigation, they discover that the images are not being pulled from the designated OCIR repository, even though the YAML configuration has the correct path to the images. What is a valid concern here that needs to be further investigated?

Security List rule for TCP port 22 needs to be added to connect to the OCIR service.

Identity and Access Management (IAM) credentials need to be added for each user that deploys applications to the OKE cluster.

VCN hosting the OKE cluster worker nodes needs to have a NAT gateway to access OCIR repositories.

OKE cluster needs to have a secret with the credentials of their OCIR repository and use that secret in the Kubernetes deployment manifest.

NEW QUESTION 68
Which is NOT a valid use case for leveraging the Oracle Cloud Infrastructure (OCI) Events service?

Capturing the OCI Monitoring service alarms and invoking autoscaling of compute instances.

Publishing a notification when long-lived tasks complete, such as an OCI Autonomous Database backup completion.

Triggering a notification action when a function completes its execution.

Triggering a function deployed in Oracle Functions when new files are uploaded to an OCI Object Storage bucket.

Publishing all the OCI resource events in a specific compartment to the OCI Streaming service for later analysis.

NEW QUESTION 69
You are developing a polyglot serverless application using Oracle Functions. Which language cannot be used to write your function code?

PL/SQL

Python

Node.js

Java

NEW QUESTION 70
You are using Oracle Cloud Infrastructure (OCI) Resource Manager to manage your infrastructure lifecycle and wish to receive an email each time a Terraform action begins. How should you use the OCI Events service to do this without writing any code?

Create a rule in OCI Events service matching the “Resource Manager Stack – Update” condition. Then select “Action Type: Email” and provide the destination email address.

Create an OCI Notification topic and email subscription with the destination email address. Then create an OCI Events rule matching “Resource Manager Job – Create” condition, and select the notification topic for the corresponding action.

Create an OCI Email Delivery configuration with the destination email address. Then create an OCI Events rule matching “Resource Manager Job – Create” condition, and select the email configuration for the corresponding action.

Create an OCI Notifications topic and email subscription with the destination email address. Then create an OCI Events rule matching “Resource Manager Stack – Update” condition, and select the notification topic for the corresponding action.