Exams4sures 1Z0-1084-21 Exam Questions Real 1Z0-1084-21 Practice Dumps [Q42-Q61]

Posted On July 16, 2022

Exams4sures 1Z0-1084-21 Exam Questions | Real 1Z0-1084-21 Practice Dumps

Verified 1Z0-1084-21 Exam Dumps Q&As – Provide 1Z0-1084-21 with Correct Answers

NO.42 Which header is NOT required when signing GET requests to Oracle Cloud Infrastructure APIs?

date or x-date

(request-target)

content-type

host

NO.43 You are developing a serverless application with Oracle Functions. Your function needs to store state in a database. Your corporate security Standards mandate encryption of secret information like database passwords.
As a function developer, which approach should you follow to satisfy this security requirement?

Use Oracle Cloud Infrastructure Key Management to auto-encrypt the password. It will inject the auto-decrypted password inside your function container.

All function configuration variables are automatically encrypted by Oracle Functions.

Use the Oracle Cloud Infrastructure Console and enter the password in the function configuration section in the provided input field.

Encrypt the password using Oracle Cloud Infrastructure Key Management. Decrypt this password in your function code withthe generated key.

NO.44 In a Linux environment, what is the default locations of the configuration file that Oracle Cloud Infrashtructure CLI uses for profile information/

/etc/.oci/config

/usr/local/bin/config

SHOME/.oci/config

/usr/bin/oci/config

NO.45 You are developing a serverless application with Oracle Functions and Oracle Cloud Infrastructure Object Storage- Your function needs to read a JSON file object from an Object Storage bucket named”input-bucket” in compartment “qa-compartment”. Your corporate security standards mandate the use of Resource Principals for this use case.
Which two statements are needed to implement this use case?

Set up a policy with the following statement to grant read access to the bucket:
allow dynamic-group read-file-dg to read objects in compartment qa-compartment where target .bucket
.name=’ input-bucket *

Set up the following dynamic group for your function’s OCID: Name: read-file-dg Rule: resource. id = ‘ ocid1. f nf unc. ocl -phx. aaaaaaaakeaobctakezj z5i4uj j 7g25q7sx5mvr55pms6f
4da !

Set up a policy to grant all functions read access to the bucket:
allow all functions in compartment qa-compartment to read objects in target.bucket.name=’input-bucket’

Set up a policy to grant your user account read access to the bucket:
allow user XYZ to read objects in compartment qa-compartment where target .bucket, name-‘input-bucket’

No policies are needed. By default, every function has read access to Object Storage buckets in the tenancy

NO.46 What is the open source engine for Oracle Functions?

Apache OpenWhisk

OpenFaaS

Fn Project

Knative

NO.47 As a cloud-native developer, you are designing an application that depends on Oracle Cloud Infrastructure (OCI) Object Storage wherever the application is running. Therefore, provisioning of storage buckets should be part of your Kubernetes deployment process for the application. Which should you leverage to meet this requirement?

OCI Service Broker for Kubernetes

OCI ContainerEngine for Kubernetes

Open Service Broker API

Oracle Functions

NO.48 Which two are characteristics of microservices?

Microservices are hard to test in isolation.

Microservicescan be independently deployed.

All microservices share a data store.

Microservices can be implemented in limited number of programming languages.

Microservices communicate over lightweight APIs.

NO.49 You are deploying an API via Oracle Cloud Infrastructure (OCI) API Gateway and you want to implement request policies to control access Which is NOT available in OCI API Gateway?

Limiting the number of requests sent to backend services

Enabling CORS (Cross-Origin Resource Sharing) support

Providing authentication and authorization

Controlling access to OCI resources

NO.50 You have two microservices, A and B running in production. Service A relies on APIs fromservice B.
You want to test changes to service A without deploying all of its dependencies, which includes service B.
Which approach should you take to test service A?

Test against production APIs.

Test using API mocks.

There is no need to explicitly test APIs.

Test the APIs in private environments.

NO.51 What is one of the differences between a microservice and a serverless function?

Microservices are used for long running operations and serverless functions for short running operations.

Microservices always use a data storeand serverless functions never use a data store.

Microservices are stateless and serverless functions are stateful.

Microservices are triggered by events and serverless functions are not.

NO.52 Per CAP theorem, in which scenario do you NOTneed to make any trade-off between the guarantees?

when there are no network partitions

when the system is running in the cloud

when the system is running on-premise

when you are using load balancers

NO.53 You have written a Node.js function and deployed it to Oracle Functions. Next, you need to call this function from a microservicewritten in Java deployed on Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE).
Which can help you to achieve this?

Use the OCI CLI with kubect1 to invoke the function from the microservice.

Oracle Functions does not allow a microservice deployed on OKE to invoke a function.

OKE does not allow a microservice to invoke a function from Oracle Functions.

Use the OCI Java SDK to invoke the function from the microservice.

NO.54 How do you perform a rolling update in Kubernetes?

kubect1 rolling-update

kubect1 upgrade <deployment-name> -image=*image:v2

kubect1 update -c <container>

kubect1 rolling-update <deployment-name> -image=image

NO.55 You need to execute a script on a remote instance through Oracle Cloud Infrastructure Resource Manager.
Which option can you use?

Use /bin/sh with the full path to the location of thescript to execute the script.

It cannot be done.

Download the script to a local desktop and execute the script.

Use remote-exec

NO.56 Given a service deployed on Oracle Cloud Infrastructure Container Engine far Kubernetes (OKE), which annotation should you add in the sample manifest file below to specify a 400 Mbps load balancer?

service.beta.kubernetes.io/oci-load-balancer-value: 400Mbps

service.beta.kubernetes.io/oci-load-balancer-size: 400Mbps

service.beta.kubernetes.io/oci-load-balancer-shape: 400Mbps

service, beta, kubernetes . io/oci-load-balancer-kind: 400Mbps

NO.57 Which one of the statements describes a service aggregator pattern?

It isimplemented in each service separately and uses a streaming service

It involves implementing a separate service that makes multiple calls to other backend services

It uses a queue on both sides of the service communication

It involves sending events through a message broker

NO.58 You are building a container image and pushing it to the Oracle Cloud Infrastructure Registry (OCIR). You need to make sure that these get deleted from the repository.
Which action should you take?

Create a group and assign a policy to perform lifecycle operations on images.

Set global policy of image retention to “Retain All Images”.

In your compartment, write a policy to limit accessto the specific repository.

Edit the tenancy global retention policy.

NO.59 You have a containerized app that requires an Autonomous Transaction Processing (ATP) Database. Which option is not valid for o from a container in Kubernetes?

EnableOracle REST Data Services for the required schemas and connect via HTTPS.

Create a Kubernetes secret with contents from the instance Wallet files. Use this secret to create a volume mounted to the appropriate path in the application deployment manifest.

Use Kubernetes secrets to configure environment variables on the container with ATP instance OCID, and OCI API credentials. Then use the CreateConnection API endpoint from the service runtime.

Install the Oracle Cloud Infrastructure Service Broker on the Kubernetes cluster and deploy serviceinstance and serviceBinding resources for ATP. Then use the specified binding name as a volume in the application deployment manifest.

Explanation
The Kubernetes documentation lays out the following use case for the Service Catalog API:
An application developer wants to use message queuing as part of their application running in a Kubernetes cluster. However, they do not want todeal with the overhead of setting such a service up and administering it themselves. Fortunately, there is a cloud provider that offers message queuing as a managed service through its service broker.
A cluster operator can setup Service Catalog and use itto communicate with the cloud provider’s service broker to provision an instance of the message queuing service and make it available to the application within the Kubernetes cluster. The application developer therefore does not need to be concerned withthe implementation details or management of the message queue. The application can simply use it as a service.
The samples in theOCI Service Broker source code include a deployment YAML file that describes how to use an init container to take the values in the Autonomous Transaction Processing service binding and put them in environment variables or in a volume mount. After that, your application can use those values to connect to the database.
Once you’ve installed and registered the service broker, you’re ready to use the ATP service plan to provision an ATP instance. I’ll go into details below, but the overview of the process looks like so:
-Create a Kubernetes secret with a new admin and wallet password (in JSON format)
– Create a YAML configuration for the ATP Service Instance
– Deploy the Service Instance
– Create a YAML config for the ATP Service Binding
– Deploy the Service Binding to obtain which results in the creation of a new Kubernetes secret containing the wallet contents
– Create a Kubernetes secret for Microservice deployment use containing the admin password and the wallet password (in plain text format)
– Create a YAML config for the Microservice deployment which uses an initContainer to decode the wallet secrets (due to a bug which double encodes them) and mounts the wallet contents as a volume References:
https://blogs.oracle.com/developers/creating-an-atp-instance-with-the-oci-service-broker
https://blogs.oracle.com/cloud-infrastructure/integrating-oci-service-broker-with-autonomous-transaction-proces

NO.60 Which pattern can help you minimize the probability of cascading failures in your system during partial loss of connectivity or a complete service failure?

Retry pattern

Anti-corruption layer pattern

Circuit breaker pattern

Compensating transaction pattern

NO.61 Which one of the following is NOT a valid backend-type supported by Oracle Cloud Infrastructure (OCI) API Gateway?

STOCK_RESPONSE_BACKEND

ORACLE_FUNCTIONS_BACKEND

ORACLE_STREAMS_BACKEND

HTTP_BACKEND

Oracle 1Z0-1084-21 Exam Syllabus Topics:

Topic	Details
Topic 1	Developing Cloud Native Applications Manage multiple environments (dev, test stage, prod)
Topic 2	Build, Deploy and Release Applications Testing Cloud Native Applications
Topic 3	Develop Serverless Application with Oracle Functions Develop Microservices and Applications for OKE
Topic 4	Explain Microservices vs. Containers vs. Functions Use OCI APIs, SDKs and CLIupgrade
Topic 5	Perform Tasks around Monitoring, Observability, and Alerting Explain Distributed Computing
Topic 6	Configure and Use Secret Management Operating Cloud Native Applications Cloud Native Fundamentals
Topic 7	Explain the Challenges of testing in Cloud Native world Describe Service Communication Patterns
Topic 8	Securing Cloud Native Applications Use the Defense-in-depth approach