1z0-1084-22 Exam Info and Free Practice Test All-in-One Exam Guide Nov-2022 [Q31-Q55]

Rate this post

1z0-1084-22 Exam Info and Free Practice Test All-in-One Exam Guide Nov-2022

Pass Oracle 1z0-1084-22 Actual Free Exam Q&As Updated Dump Nov 28, 2022

Oracle 1z0-1084-22 Exam Syllabus Topics:

Topic	Details
Topic 1	Build event-driven serverless applications using OCI event service Explain DevOps and discuss the role of container orchestration
Topic 2	Monitoring & Troubleshooting Cloud Native Applications Perform Tasks around Monitoring, Logging, and Tracing
Topic 3	Use OCI Logging service to enable, manage, and search logs Testing and Securing Cloud Native Applications
Topic 4	Discuss various strategies for testing cloud native applications Cloud Native Applications And Containerization
Topic 5	Utilize OCI Monitoring service to view metrics Explain the fundamentals of cloud native and discuss the key pillars of cloud native development
Topic 6	Apply security measures to overcome challenges with cloud native development Explain docker and the concepts around its architecture and components
Topic 7	Explain cloud native testing and discuss measures for testing cloud native applications Develop Serverless Application with Oracle Functions
Topic 8	Create API gateways to process traffic from API clients and route it to back-end services Leveraging Serverless Technologies for Cloud Native Development

Q31. Your organization uses a federated identity provider to login to your Oracle Cloud Infrastructure (OCI) environment. As a developer, you are writing a script to automate some operation and want to use OCI CLI to do that. Your security team doesn’t allow storing private keys on local machines.
How can you authenticate with OCI CLI?

Run oci setup keys and provide your credentials

Run oci session refresh -profile <profile_name>

Run oci session authenticate and provide your credentials

Run oci setup oci-cli-rc -file path/to/target/file

Q32. Which two “Action Type” options are NOT available in an Oracle Cloud Infrastructure (OCI) Events rule definition?

Notifications

Functions

Streaming

Slack

Q33. You have written a Node.js function and deployed it to Oracle Functions. Next, you need to call this function from a microservice written in Java deployed on Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE).
Which can help you to achieve this?

Use the OCI CLI with kubect1 to invoke the function from the microservice.

Oracle Functions does not allow a microservice deployed on OKE to invoke a function.

OKE does not allow a microservice to invoke a function from Oracle Functions.

Use the OCI Java SDK to invoke the function from the microservice.

Q34. Which Oracle Cloud Infrastructure (OCI) load balancer shape is used by default in OCI container Engineer for Kubernetes?

400 Mbps

8000 Mbps

There is no default. The shape has to be specified.

100 Mbps

Q35. You are working on a cloud native e-commerce application on Oracle Cloud Infrastructure (OCI). Your application architecture has multiple OCI services, including Oracle Functions. You need to trigger these functions directly from other OCI services, without having to run custom code.
Which OCI service cannot trigger your functions directly?

OCI Events Service

OCI Registry

OCI API Gateway

Oracle Integration

Overview of Functions:
Oracle Functions is a fully managed, multi-tenant, highly scalable, on-demand, Functions-as-a-Service platform. It is built on enterprise-grade Oracle Cloud Infrastructure and powered by the Fn Project open source engine. Use Oracle Functions (sometimes abbreviated to just Functions) when you want to focus on writing code to meet business needs.
The serverless and elastic architecture of Oracle Functions means there’s no infrastructure administration or software administration for you to perform. You don’t provision or maintain compute instances, and operating system software patches and upgrades are applied automatically. Oracle Functions simply ensures your app is highly-available, scalable, secure, and monitored. With Oracle Functions, you can write code in Java, Python, Node, Go, and Ruby (and for advanced use cases, bring your own Dockerfile, and Graal VM).
You can invoke a function that you’ve deployed to Oracle Functions from:
– The Fn Project CLI.
– The Oracle Cloud Infrastructure SDKs.
– Signed HTTP requests to the function’s invoke endpoint. Every function has an invoke endpoint.
– Other Oracle Cloud services (for example, triggered by an event in the Events service) or from external services.
so You can then deploy your code, call it directly or trigger it in response to events, and get billed only for the resources consumed during the execution.
Invoking Oracle Functions from Other Oracle Cloud Infrastructure Services:
You can invoke functions in Oracle Functions from other Oracle Cloud Infrastructure services. Typically, you’ll want an event in another service to trigger a request to invoke a function defined in Oracle Functions.
This functionality is currently available in:
1. The Events service. For more information, see Overview of Events.
2.The Notifications service. For more information, see Notifications Overview. For a scenario, see Scenario A: Automatically Resize VMs.
3.The API Gateway service. For more information, see Adding a Function in Oracle Functions as an API Gateway Back End.
4.The Oracle Integration service, using the OCI Signature Version 1 security policy. For more information, see Configure Oracle Integration to Call Oracle Cloud Infrastructure Functions with the REST Adapter in Using the REST Adapter with Oracle Integration.

so OCI Registry services cannot trigger your functions directly
References:
https://docs.cloud.oracle.com/en-us/iaas/Content/Functions/Tasks/functionsintegratingwithother.htm
https://docs.cloud.oracle.com/en-us/iaas/Content/Functions/Concepts/functionsoverview.htm
https://blogs.oracle.com/cloud-infrastructure/announcing-notifications-triggers-for-serverless-functions

Q36. You have two microservices, A and B running in production. Service A relies on APIs from service B.
You want to test changes to service A without deploying all of its dependencies, which includes service B.
Which approach should you take to test service A?

Test against production APIs.

Test using API mocks.

There is no need to explicitly test APIs.

Test the APIs in private environments.

Q37. You are developing a serverless application with Oracle Functions and Oracle Cloud Infrastructure Object Storage- Your function needs to read a JSON file object from an Object Storage bucket named “input-bucket” in compartment “qa-compartment”. Your corporate security standards mandate the use of Resource Principals for this use case.
Which two statements are needed to implement this use case?

Set up a policy with the following statement to grant read access to the bucket:
allow dynamic-group read-file-dg to read objects in compartment qa-compartment where target .bucket .name=’ input-bucket *

Set up the following dynamic group for your function’s OCID: Name: read-file-dg Rule: resource . id = ‘ ocid1. f nf unc. ocl -phx. aaaaaaaakeaobctakezj z5i4uj j 7g25q7sx5mvr55pms6f 4da !

Set up a policy to grant all functions read access to the bucket:
allow all functions in compartment qa-compartment to read objects in target.bucket.name=’input-bucket’

Set up a policy to grant your user account read access to the bucket:
allow user XYZ to read objects in compartment qa-compartment where target .bucket, name-‘input-bucket’

No policies are needed. By default, every function has read access to Object Storage buckets in the tenancy

Q38. Which two statements are true for serverless computing and serverless architectures?

Long running tasks are perfectly suited for serverless

Serverless function state should never be stored externally

Application DevOps team is responsible for scaling

Serverless function execution is fully managed by a third party

Applications running on a FaaS (Functions as a Service) platform

Q39. Which testing approaches is a must for achieving high velocity of deployments and release of cloud-native applications?

Integration testing

A/B testing

Automated testing

Penetration testing

Q40. You are using Oracle Cloud Infrastructure (0CI) Resource Manager to manage your infrastructure lifecycle and wish to receive an email each time a Terraform action begins.
How should you use the OCI Events service to do this without writing any code?

Create an OCI Notifications topic and email subscription with the destination email address. Then create an OCI Events rule matching “Resource Manager Stack – Update” condition, and select the notification topic for the corresponding action.

Create an OCI Notification topic and email subscription with the destination email address. Then create an OCI Events rule matching “Resource Manager job – Create” condition, and select the notification topic for the corresponding action.

Create a rule in OCI Events service matching the “Resource Manager Stack – Update” condition. Then select “Action Type: Email” and provide the destination email address.

Create an OCI Email Delivery configuration with the destination email address. Then create an OCI Events rule matching “Resource Manager Job – Create” condition, and select the email configuration for the corresponding action.

Q41. Who is responsible for patching, upgrading and maintaining the worker nodes in Oracle Cloud Infrastructure Container Engine for Kubernetes (OKE)?

It Is automated

Independent Software Vendors

Oracle Support

The user

After a new version of Kubernetes has been released and when Container Engine for Kubernetes supports the new version, you can use Container Engine for Kubernetes to upgrade master nodes running older versions of Kubernetes. Because Container Engine for Kubernetes distributes the Kubernetes Control Plane on multiple Oracle-managed master nodes (distributed across different availability domains in a region where supported) to ensure high availability, you’re able to upgrade the Kubernetes version running on master nodes with zero downtime.
Having upgraded master nodes to a new version of Kubernetes, you can subsequently create new node pools running the newer version. Alternatively, you can continue to create new node pools that will run older versions of Kubernetes (providing those older versions are compatible with the Kubernetes version running on the master nodes).
Note that you upgrade master nodes by performing an ‘in-place’ upgrade, but you upgrade worker nodes by performing an ‘out-of-place’ upgrade. To upgrade the version of Kubernetes running on worker nodes in a node pool, you replace the original node pool with a new node pool that has new worker nodes running the appropriate Kubernetes version. Having ‘drained’ existing worker nodes in the original node pool to prevent new pods starting and to delete existing pods, you can then delete the original node pool.
Upgrading the Kubernetes Version on Worker Nodes in a Cluster:
After a new version of Kubernetes has been released and when Container Engine for Kubernetes supports the new version, you can use Container Engine for Kubernetes to upgrade master nodes running older versions of Kubernetes. Because Container Engine for Kubernetes distributes the Kubernetes Control Plane on multiple Oracle-managed master nodes (distributed across different availability domains in a region where supported) to ensure high availability, you’re able to upgrade the Kubernetes version running on master nodes with zero downtime.
You can upgrade the version of Kubernetes running on the worker nodes in a cluster in two ways:
(A) Perform an ‘in-place’ upgrade of a node pool in the cluster, by specifying a more recent Kubernetes version for new worker nodes starting in the existing node pool. First, you modify the existing node pool’s properties to specify the more recent Kubernetes version. Then, you ‘drain’ existing worker nodes in the node pool to prevent new pods starting, and to delete existing pods. Finally, you terminate each of the worker nodes in turn. When new worker nodes are started in the existing node pool, they run the more recent Kubernetes version you specified. See Performing an In-Place Worker Node Upgrade by Updating an Existing Node Pool.
(B) Perform an ‘out-of-place’ upgrade of a node pool in the cluster, by replacing the original node pool with a new node pool. First, you create a new node pool with a more recent Kubernetes version. Then, you ‘drain’ existing worker nodes in the original node pool to prevent new pods starting, and to delete existing pods. Finally, you delete the original node pool. When new worker nodes are started in the new node pool, they run the more recent Kubernetes version you specified. See Performing an Out-of-Place Worker Node Upgrade by Replacing an Existing Node Pool with a New Node Pool.
Note that in both cases:
The more recent Kubernetes version you specify for the worker nodes in the node pool must be compatible with the Kubernetes version running on the master nodes in the cluster. See Upgrading Clusters to Newer Kubernetes Versions).
You must drain existing worker nodes in the original node pool. If you don’t drain the worker nodes, workloads running on the cluster are subject to disruption.
References:
https://docs.cloud.oracle.com/en-us/iaas/Content/ContEng/Tasks/contengupgradingk8sworkernode.htm

Q42. Which two are benefits of distributed systems?

Privacy

Security

Ease of testing

Scalability

Resiliency

distributed systems of native-cloud like functions that have a lot of benefit like Resiliency and availability Resiliency and availability refers to the ability of a system to continue operating, despite the failure or sub-optimal performance of some of its components.
In the case of Oracle Functions:
The control plane is a set of components that manages function definitions.
The data plane is a set of components that executes functions in response to invocation requests.
For resiliency and high availability, both the control plane and data plane components are distributed across different availability domains and fault domains in a region. If one of the domains ceases to be available, the components in the remaining domains take over to ensure that function definition management and execution are not disrupted.
When functions are invoked, they run in the subnets specified for the application to which the functions belong. For resiliency and high availability, best practice is to specify a regional subnet for an application (or alternatively, multiple AD-specific subnets in different availability domains). If an availability domain specified for an application ceases to be available, Oracle Functions runs functions in an alternative availability domain.
Concurrency and Scalability
Concurrency refers to the ability of a system to run multiple operations in parallel using shared resources. Scalability refers to the ability of the system to scale capacity (both up and down) to meet demand.
In the case of Functions, when a function is invoked for the first time, the function’s image is run as a container on an instance in a subnet associated with the application to which the function belongs. When the function is executing inside the container, the function can read from and write to other shared resources and services running in the same subnet (for example, Database as a Service). The function can also read from and write to other shared resources (for example, Object Storage), and other Oracle Cloud Services.
If Oracle Functions receives multiple calls to a function that is currently executing inside a running container, Oracle Functions automatically and seamlessly scales horizontally to serve all the incoming requests. Oracle Functions starts multiple Docker containers, up to the limit specified for your tenancy. The default limit is 30 GB of RAM reserved for function execution per availability domain, although you can request an increase to this limit. Provided the limit is not exceeded, there is no difference in response time (latency) between functions executing on the different containers.

Q43. What are two of the main reasons you would choose to implement a serverless architecture?

No need for integration testing

Reduced operational cost

Improved In-function state management

Automatic horizontal scaling

Easier to run long-running operations

Q44. As a cloud-native developer, you are designing an application that depends on Oracle Cloud Infrastructure (OCI) Object Storage wherever the application is running. Therefore, provisioning of storage buckets should be part of your Kubernetes deployment process for the application. Which should you leverage to meet this requirement?

OCI Service Broker for Kubernetes

OCI Container Engine for Kubernetes

Open Service Broker API

Oracle Functions

Q45. Given a service deployed on Oracle Cloud Infrastructure Container Engine far Kubernetes (OKE), which annotation should you add in the sample manifest file below to specify a 400 Mbps load balancer?

service.beta.kubernetes.io/oci-load-balancer-value: 400Mbps

service.beta.kubernetes.io/oci-load-balancer-size: 400Mbps

service.beta.kubernetes.io/oci-load-balancer-shape: 400Mbps

service, beta, kubernetes . io/oci-load-balancer-kind: 400Mbps

Q46. What is the minimum amount of storage that a persistent volume claim can obtain In Oracle Cloud Infrastructure Container Engine for Kubemetes (OKE)?

1 TB

10 GB

1 GB

50 GB

Q47. You are tasked with developing an application that requires the use of Oracle Cloud Infrastructure (OCI) APIs to POST messages to a stream in the OCI Streaming service.
Which statement is incorrect?

The request must include an authorization signing string including (but not limited to) x-content-sha256, content-type, and content-length headers.

The Content-Type header must be Set to application/j son

An HTTP 401 will be returned if the client’s clock is skewed more than 5 minutes from the server’s.

The request does not require an Authorization header.

Q48. Which two handle Oracle Functions authentication automatically?

Oracle Cloud Infrastructure SDK

cURL

Oracle Cloud Infrastructure CLl

Signed HTTP Request

Fn Project CLI

Q49. You created a pod called “nginx” and its state is set to Pending.
Which command can you run to see the reason why the “nginx” pod is in the pending state?

kubect2 logs pod nginx

kubect2 describe pod nginx

kubect2 get pod nginx

Through the Oracle Cloud Infrastructure Console

Q50. In order to effectively test your cloud-native applications, you might utilize separate environments (development, testing, staging, production, etc.). Which Oracle Cloud Infrastructure (OC1) service can you use to create and manage your infrastructure?

OCI Compute

OCI Container Engine for Kubernetes

OCI Resource Manager

OCI API Gateway

Q51. You are processing millions of files in an Oracle Cloud Infrastructure (OCI) Object Storage bucket. Each time a new file is created, you want to send an email to the customer and create an order in a database. The solution should perform and minimize cost, Which action should you use to trigger this email?

Schedule a cron job that monitors the OCI Object Storage bucket and emails the customer when a new file is created.

Use OCI Events service and OCI Notification service to send an email each time a file is created.

Schedule an Oracle Function that checks the OCI Object Storage bucket every minute and emails the customer when a file is found.

Schedule an Oracle Function that checks the OCI Object Storage bucket every second and emails the customer when a file is found.

Q52. Which is NOT a valid option to execute a function deployed on Oracle Functions?

Send a signed HTTP requests to the function’s invoke endpoint

Invoke from Oracle Cloud Infrastructure CLI

Invoke from Docker CLI

Trigger by an event in Oracle Cloud Infrastructure Events service

Invoke from Fn Project CLI

Q53. What is the open source engine for Oracle Functions?

Apache OpenWhisk

OpenFaaS

Fn Project

Knative

Q54. A service you are deploying to Oracle infrastructure (OCI) Container En9ine for Kubernetes (OKE) uses a docker image from a private repository Which configuration is necessary to provide access to this repository from OKE?

Add a generic secret on the cluster containing your identity credentials. Then specify a registrycredentials property in the deployment manifest.

Create a docker-registry secret for OCIR with API key credentials on the cluster, and specify the imagepullsecret property in the application deployment manifest.

Create a docker-registry secret for OCIR with identity Auth Token on the cluster, and specify the image pull secret property in the application deployment manifest.

Create a dynamic group for nodes in the cluster, and a policy that allows the dynamic group to read repositories in the same compartment.

Pulling Images from Registry during Deployment
During the deployment of an application to a Kubernetes cluster, you’ll typically want one or more images to be pulled from a Docker registry. In the application’s manifest file you specify the images to pull, the registry to pull them from, and the credentials to use when pulling the images. The manifest file is commonly also referred to as a pod spec, or as a deployment.yaml file (although other filenames are allowed).
If you want the application to pull images that reside in Oracle Cloud Infrastructure Registry, you have to perform two steps:
– You have to use kubectl to create a Docker registry secret. The secret contains the Oracle Cloud Infrastructure credentials to use when pulling the image. When creating secrets, Oracle strongly recommends you use the latest version of kubectl To create a Docker registry secret:
1- If you haven’t already done so, follow the steps to set up the cluster’s kubeconfig configuration file and (if necessary) set the KUBECONFIG environment variable to point to the file. Note that you must set up your own kubeconfig file. You cannot access a cluster using a kubeconfig file that a different user set up.
2- In a terminal window, enter:
$ kubectl create secret docker-registry <secret-name> –docker-server=<region-key>.ocir.io –docker-username='<tenancy-namespace>/<oci-username>’ –docker-password='<oci-auth-token>’ –docker-email='<email-address>’ where:
<secret-name> is a name of your choice, that you will use in the manifest file to refer to the secret . For example, ocirsecret
<region-key> is the key for the Oracle Cloud Infrastructure Registry region you’re using. For example, iad. See Availability by Region.
ocir.io is the Oracle Cloud Infrastructure Registry name.
<tenancy-namespace> is the auto-generated Object Storage namespace string of the tenancy containing the repository from which the application is to pull the image (as shown on the Tenancy Information page). For example, the namespace of the acme-dev tenancy might be ansh81vru1zp. Note that for some older tenancies, the namespace string might be the same as the tenancy name in all lower-case letters (for example, acme-dev).
<oci-username> is the username to use when pulling the image. The username must have access to the tenancy specified by <tenancy-name>. For example, [email protected] . If your tenancy is federated with Oracle Identity Cloud Service, use the format oracleidentitycloudservice/<username>
<oci-auth-token> is the auth token of the user specified by <oci-username>. For example, k]j64r{1sJSSF-;)K8
<email-address> is an email address. An email address is required, but it doesn’t matter what you specify. For example, [email protected]
– You have to specify the image to pull from Oracle Cloud Infrastructure Registry, including the repository location and the Docker registry secret to use, in the application’s manifest file.
References:
https://docs.cloud.oracle.com/en-us/iaas/Content/Registry/Tasks/registrypullingimagesfromocir.htm

Q55. Which is NOT a supported SDk Oracle Cloud Infrastructure (OCI)?

Go SDK

Java SDK

NET SDK

Ruby SDK

Python SDK