1z0-1084-26 by Oracle Valid Free Exam Practice Test

Question 1

Which " Action Type " option is NOT available in an Oracle Cloud Infrastructure (OCI) Events rule definition?

A. Notifications B. Functions C. Email D. Streaming

Correct Answer: C

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 2

You are tasked with developing an application that requires the use of Oracle Cloud Infrastructure (OCI) APIs to POST messages to a stream in the OCI Streaming service. Which statement is incorrect? (Choose the best answer.)

A. The request does not require an Authorization header. B. An HTTP 401 will be returned if the client ' s clock is skewed more than 5 minutes from the server ' s. C. The request must include an authorization signing string including (but not limited to) x-content- sha256, content-type, and content-length headers. D. The Content-Type header must be set to application/json

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 3

What is the open source engine for Oracle Functions?

A. Apache OpenWhisk B. OpenFaas C. Knative D. Fn Project

Correct Answer: D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 4

Which TWO are part of the Cloud Native Computing Foundation (CNCF) container runtime? (Choose two.)

A. containerd B. runc C. getcd D. rkt-o

Correct Answer: A,B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 5

Which key pillar of cloud native development should be utilized when a development team needs to automate build, test, and release cycles to achieve rapid and reliable software delivery?

A. Containerization B. Serverless Computing C. DevOps Principles D. Microservices Architecture

Correct Answer: C

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 6

A service you are deploying to Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) uses a docker image from a private repository in OCI Registry (OCIR). Which configuration is necessary to provide access to this repository from OKE?

A. Create a docker-registry secret for OCIR with API key credentials on the cluster, and specify the imagePullSecret property in the application deployment manifest. B. Create a dynamic group for nodes in the cluster, and a policy that allows the dynamic group to read repositories in the same compartment. C. Create a docker-registry secret for OCIR with identity Auth Token on the cluster, and specify the imagePullSecret property in the application deployment manifest. D. Add a generic secret on the cluster containing your identity credentials. Then specify a registryCredentials property in the deployment manifest.

Correct Answer: C

Question 7

You are developing a microservice that consumes messages from an Oracle Cloud Infrastructure (OCI) Queue and must delete each message after it is successfully processed. Which OCI CLI command should you use to delete an individual message using its receipt?

A. oci queue messages delete --message-id < message_id > --queue-id < queue_OCID > B. oci queue messages delete-message --message-id < message_id > --queue-id < queue_OCID > C. oci queue messages delete-message --message-receipt < message_receipt > --queue-id < queue_OCID > D. oci queue messages delete --message-receipt < message_receipt > --queue-id < queue_OCID >

Correct Answer: C

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 8

You need to push a new Docker container image to a repository in the Oracle Cloud Infrastructure (OCI) Registry. Which mechanism must you use to provide authentication?

A. Generate an Auth Token to complete the authentication via the OCI CLI. B. Generate an Auth Token to complete the authentication via the Docker CLI. C. Generate an API signing key to complete the authentication via the OCI CLI. D. Generate an API signing key to complete the authentication via the Docker CLI.

Correct Answer: B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 9

What is the maximum execution time of Oracle Functions?

A. 60 seconds B. 240 seconds C. 120 seconds D. 300 seconds

Correct Answer: D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 10

You deployed a Python application to an Oracle Container Engine for Kubernetes (OKE) cluster. However, while testing you found a bug, which you rectified and then created a new Docker image. You now need to ensure that if this new image does not work once deployed, you should be able to roll back to the previous version. Using kubect1, which strategy should you use?

A. Rolling Update B. Canary Deployment C. Blue/Green Deployment D. A/B Testing

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 11

Which statement is NOT valid regarding OCI Identity and Access Management (IAM) policies written for OKE Workload Identity?

A. The policy statement must be scoped strictly at the tenancy level and cannot be written to restrict access to a specific compartment. B. The policy condition must specify the Kubernetes namespace, service account name, and OKE cluster OCID. C. The policy subject must be specified as any-user rather than a specific IAM group or dynamic group name. D. The policy condition must explicitly define request.principal.type with the value set to workload.

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 12

What can you use to dynamically make Kubernetes resources discoverable to public DNS servers? (Choose the best answer.)

A. ExternalDNS B. CoreDNS C. kubeDNS D. DynDNS

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 13

You are deploying a serverless data integration pipeline where an OCI Function needs to consume real-time events from an OCI Stream in the prod-compartment compartment. Your corporate security policy mandates strict least-privilege access, meaning the function must only be permitted to consume (pull) messages, with absolutely no capability to publish (push) messages to the stream. Which TWO configurations are required to establish this granular authorization using a Dynamic Group named analytics-function-dg?

A. Create a dynamic group rule to match the function: ALL {resource.type = ' compute ' , resource.
compartment.id = ' ocid1.compartment.oc1..example ' } B. Create an IAM policy statement: Allow dynamic-group analytics-function-dg to use stream-push in compartment prod-compartment C. Create a dynamic group rule to match the function: ALL {resource.type = ' fnfunc ' , resource.
compartment.id = ' ocid1.compartment.oc1..example ' } D. Create an IAM policy statement: Allow dynamic-group analytics-function-dg to use streams in compartment prod-compartment E. Create an IAM policy statement: Allow dynamic-group analytics-function-dg to use stream-pull in compartment prod-compartment

Correct Answer: C,E

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 14

You plan to implement logging in your services that will run in Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE). Which statement describes the appropriate logging approach?

A. All services log to standard output only. B. All services log to an external logging system. C. All serviceAAs log to a shared log file. D. Each service logs to its own log file.

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 15

Which statement is NOT valid regarding the structure and behavior of Docker images and containers?

A. Running a Docker container adds a thin writable layer on top of the underlying read-only image layers. B. Deleting a Docker container also permanently deletes the underlying image from the host system by default. C. A Docker image is composed of a series of read-only layers that represent filesystem differences. D. Modifying an existing file within a running container copies the file from the read-only layer to the writable layer.

Correct Answer: B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Oracle Cloud Infrastructure Developer Professional - 1z0-1084-26 Exam Practice Test