Real 1z0-1084-24 Exam Questions are the Best Preparation Material [Q12-Q27]

5/5 - (1 vote)

Real 1z0-1084-24 Exam Questions are the Best Preparation Material

Practice on 2024 LATEST 1z0-1084-24 Exam Updated 101 Questions

Q12. You developed a microservices-based application that runs in an Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) cluster. It has multiple endpoints that need to be exposed to the public internet.
What is the most cost-effective way to expose multiple application endpoints without adding unnecessary complexity to the application?

Use a NodePort service type in Kubernetes for each of your service endpoints using the node’s public IP address to access the applications.

Create a separate load balancer instance for each service using the lowest 100 Mbps option.

Use a ClusterIP service type in Kubernetes for each of your service endpoints using a load balancer to expose the endpoints.

Deploy an Ingress Controller and use it to expose each endpoint with its own routing endpoint.

Q13. You plan to implement logging in your services that will run in Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE). Which statement describes the appropriate logging approach?

All services log to an external logging system.

All serviceAAs log to a shared log file.

All services log to standard output only.

Each service logs to its own log file.

Q14. Your organization is developing serverless applications with Oracle Functions. Many functions will need to store state data in a database, which will require using appropriate credentials. However, your corporate security standards mandate encryption of secret information, such as database passwords. How would you address this security requirement?

Use OCI Console to enter the password in the function configuration section in the provided input field.

Leverage application-level configuration variables to store passwords because they are automatically encrypted by Oracle Functions.

Use the OCI Vault service to auto-encrypt the password and then set an application-level configuration variable to reference the auto-decrypted password inside your function container.

Encrypt the password using the OCI Vault service and then decrypt this password in your function code with the generated key.

Q15. Which command is used to get a Docker image from Oracle Cloud Infrastructure Registry (OCIR) to the client machine?

docker pull <region-key>.ocir.io/<tenancy-namespace>/<repo-name>: <tag>

docker pull <tenancy-namespace>/<region-key>.ocir.io/<repo-name>: <tag>

docker fetch <region-key>.ocir.io/<tenancy-namespace>/<repo-name>:<tag>

docker fetch <tenancy-namespace>/<region-key>.ocir.io/<repo-name>:<tag>

Q16. In the DevOps lifecycle, what is the difference between continuous delivery and continuous deployment?
(Choose two.)

Continuous delivery involves automation of developer tasks, while continuous deployment involves manual operational tasks.

Continuous delivery utilizes automatic deployment to a development environment, while continuous deployment involves automatic deployment to a production environment.

Continuous delivery requires more automatic linting, while continuous deployment testing must be run manually.

Continuous delivery is a process that initiates deployment manually, while continuous deployment is based on automating the deployment process.

Q17. As a developer, you have been tasked with implementing a microservices-based application. Which THREE technologies are best suited to accomplish the task? (Choose three.)

Terraform

Big Data

Anomaly Detection

Service Mesh

Docker

Kubemetes

Q18. Which statement accurately describes the Oracle Cloud Infrastructure (OCI) Load Balancer integration with OCI Container Engine for Kubernetes (OKE)?

OKE service provisions an OCI Load Balancer instance for each Kubernetes service with LoadBalancer type in the YAML configuration.

OKE service provisions a single OCI Load Balancer instance shared with all the Kubernetes services with LoadBalancer type in the YAML configuration.

OCI Load Balancer instance provisioning is triggered by the OCI Events service for each Kubernetes service with LoadBalancer type in the YAML configuration.

OCI Load Balancer instance must be manually provisioned for each Kubernetes service that requires traffic balancing.

Q19. To enforce mutual TLS (mTLS) authentication for clients of your microservices, your team has chosen to leverage the Oracle Cloud Infrastructure (OCI) API Gateway service to create new API Deployments that will direct requests to your microservices. Which is NOT valid regarding the mTLS options in OCI API Gateway?

Custom CA or custom CA bundles can be added to your gateway’s trust store ONLY if they already exist in the OCI Certificates service.

Adding a custom certificate authority (CA) or custom CA bundle to your gateway’s trust store for mTLS is optional unless you need to reject certificates that do not contain particular values (such as a domain name).

The mTLS request policy can only be enabled at the API deployment specification level, which then applies globally to ALL routes in that deployment.

Once the mTLS request policy is enabled, ALL requests with valid certificates are routed to the backend unless you have defined one or more particular values (such as a domain name).

Q20. (CHK_1>3) You have an e-commerce application that loads customers’ transactional data into the Oracle Cloud Infrastructure (OCI) Streaming service. The data must now be extracted and transformed before sending it to a third-party REST endpoint. You have been directed to leverage the OCI Service Connector Hub to automate this process. Which configuration option would address this requirement?

Configure a new service connector as follows: * Source: Streaming * Task: Functions * Target:
Functions

Configure a new service connector as follows: * Source: Streaming * Task: API Gateway * Target:
Notifications

Configure a new service connector as follows: * Source: Streaming * Task: None * Target: Notifications

Configure a new service connector as follows: * Source: Streaming * Task: API Gateway * Target:
Functions

Configure a new service connector as follows: * Source: Streaming * Task: Functions * Target: API Gateway

Q21. You have been asked to update an OKE cluster to a network configuration that has the least attack surface while the deployed applications are still directly available for access from the Internet. Which is a valid OKE cluster network configuration that meets this requirement? (Choose the best answer.)

Private subnets for nodes, the Kubemetes API endpoint, and load balancers

Private subnets for nodes; public subnets for the Kubemetes API endpoint and load balancers

Private subnets for nodes and the Kubemetes API endpoint; public subnets for load balancers

Private subnet for the Kubemetes API endpoint; public subnets for nodes and load balancers

Q22. Your company has recently deployed a new web application that uses Oracle Functions. Your manager instructs you to implement monitoring metrics to manage your systems more effectively. You know that Oracle Functions automatically monitors functions on your behalf and reports metrics via Oracle Cloud Infrastructure (OCI) Monitoring. Which TWO metrics are collected and made available by this feature?
(Choose two.)

Amount of CPU used by a function

Length of time a function runs

Number of times a function Is removed

Amount of RAM used by a function

Number of times a function is invoked

Q23. A Docker image consists of one or more layers, each of which represents a Dockerfile instruction. The layers are stacked and each one is a delta of the changes from the previous layer. What permission is associated with these layers?

read mostly

write only

movable

read only

write once

Q24. A company is developing a new application that needs to process transactions in real time. The company wants to ensure that all transactions are processed in order and that no transaction is lost. Which of these is a correct strategy for leveraging OCI Queue in this scenario?

Use a separate queue for each type of transaction.

Use a single queue to process all transactions.

Use a separate queue for each application instance.

Use a priority queue to prioritize requests.

Q25. You developed a microservices-based application that runs in an Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) cluster. Your security team wants to use SSL termination for this application.
What should you do to create a secure SSL termination for this application using the fewest steps possible?

Create a self-signed certificate and its corresponding key. Create a Kubernetes secret using the certificate and the key. Then add these annotations to the Kubernetes service: annotations: service.beta.
kubernetes.io/oci-load-balancer-ssl-ports: “443” service.beta.kubernetes.io/oci-load-balancer-tls-secret:
ssl certificate-secret

Add these annotations to the kubernetes service: annotations: service.beta.kubernetes.io/oci-load- balancer-ssl-ports: “443” service.beta.kubernetes.io/oci-load-balancer-ssl-secret-key: ssl secret-key

Generate a self-signed certificate using Let’s Encrypt. Use that certificate on OCI Load Balancer. Create the Kubernetes service using this load balancer.

The correct answer is: “Create a self-signed certificate and its corresponding key. Create a Kubernetes secret using the certificate and the key. Then add these annotations to the Kubernetes service: annotations: service.
beta.kubernetes.io/oci-load-balancer-ssl-ports: ‘443’ service.beta.kubernetes.io/oci-load-balancer-tls-secret: ssl certificate-secret.” To create a secure SSL termination for your microservices-based application running in an OCI Container Engine for Kubernetes (OKE) cluster, you can follow these steps: Create a self-signed certificate and its corresponding key: Generate a self-signed SSL certificate and its private key using a tool like OpenSSL. Create a Kubernetes secret: Create a Kubernetes secret using the certificate and key obtained in the previous step. This secret will securely store the certificate and key within the Kubernetes cluster. Add annotations to the Kubernetes service: Modify the Kubernetes service that exposes your application and add the following annotations to enable SSL termination: annotations: service.beta.kubernetes.io/oci-load- balancer-ssl-ports: ‘443’ (specify the SSL port as 443) annotations: service.beta.kubernetes.io/oci-load- balancer-tls-secret: ssl certificate-secret (specify the name of the Kubernetes secret containing the certificate and key) By following these steps, you can create a secure SSL termination for your application using a self- signed certificate and Kubernetes secret. The annotations added to the Kubernetes service ensure that the SSL port is configured correctly and the TLS secret is utilized for SSL termination when traffic reaches the load balancer. The other options provided are not the most suitable approaches for achieving secure SSL termination in an OCI Container Engine for Kubernetes (OKE) cluster: Adding annotations related to the OCI load balancer SSL secret key is not the correct approach for SSL termination in this scenario. Using Let’s Encrypt to generate a self-signed certificate and configuring it on the OCI Load Balancer is not necessary when you can create and manage the SSL certificate within the Kubernetes cluster using a Kubernetes secret.

Q26. Which of these is a valid use case for OCI Queue?

Managing network traffic between services

Storing and retrieving large files

Sending real-time streaming data

Building decoupled and scalable systems

Q27. You deployed a Python application to an Oracle Container Engine for Kubernetes (OKE) cluster. However, while testing you found a bug, which you rectified and then created a new Docker image. You now need to ensure that if this new image does not work once deployed, you should be able to roll back to the previous version. Using kubect1, which strategy should you use?

Blue/Green Deployment

Canary Deployment

Rolling Update

A/B Testing