[Oct-2024] 1z0-1084-24 Exam Dumps, 1z0-1084-24 Practice Test Questions [Q15-Q33] : Best Free Exam Guide : http://free.exams4sures.com

Best Free Exam Guide
https://free.exams4sures.com/2024/10/03/oct-2024-1z0-1084-24-exam-dumps-1z0-1084-24-practice-test-questions-q15-q33/
Export date: Fri Mar 14 21:20:36 2025 / +0000 GMT

[Oct-2024] 1z0-1084-24 Exam Dumps, 1z0-1084-24 Practice Test Questions [Q15-Q33]

[Oct-2024] 1z0-1084-24 Exam Dumps, 1z0-1084-24 Practice Test Questions

Attested 1z0-1084-24 Dumps PDF Resource [2024]

NEW QUESTION 15
Which TWO statements are correct regarding Docker images and containers? (Choose two.)

Only one container can be spawned from a given image at a time.

An image is a collection of immutable layers whereas a container is a running instance of an image.

If multiple containers are spawned from the same image, then they all use the same copy of that image in memory.

Writing and building a new Dockerfile is the only way you can create new Docker images.

A container can exist without an image but an image cannot exist without a container.

Which TWO statements are correct regarding Docker images and containers? (Choose two.) Writing and building a new Dockerfile is the only way you can create new Docker images. A container can exist without an image but an image cannot exist without a container. Only one container can be spawned from a given image at a time. If multiple containers are spawned from the same image, then they all use the same copy of that image in memory. (Correct) An image is a collection of immutable layers whereas a container is a running instance of an image. (Correct) ChatGPT The correct statements regarding Docker images and containers are: If multiple containers are spawned from the same image, then they all use the same copy of that image in memory. This statement is correct. When multiple containers are created from the same Docker image, they share the underlying layers of the image in memory. Each container has its own isolated filesystem and runtime environment, but they all use the same base image, which helps in efficient resource utilization. An image is a collection of immutable layers whereas a container is a running instance of an image. This statement is also correct. Docker images are composed of multiple layers, with each layer representing a specific change or addition to the previous layer. These layers are read-only and can be shared among multiple containers. On the other hand, a container is a lightweight and isolated runtime instance created from a specific image. It is a running process that has its own filesystem, network, and runtime configuration. The statements “Writing and building a new Dockerfile is the only way you can create new Docker images” and “A container can exist without an image but an image cannot exist without a container” are incorrect. Docker images can be created in various ways, including using Dockerfiles, importing from existing images, or pulling from registries. Additionally, a container requires an image to run, so an image must exist before a container can be created from it.

NEW QUESTION 16
Your Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) administrator has created an OKE cluster with one node pool in a public subnet. You have been asked to provide a log file from one of the nodes for troubleshooting purpose. Which step should you take to obtain the log file?

Use the username opc and password to login.

It is impossible because OKE is a managed Kubernetes service.

SSH into the nodes using the private key.

SSH into the node using the public key.

NEW QUESTION 17
(CHK_4>2) Which TWO statements are NOT valid regarding the Oracle Cloud Infrastructure (OCI) Streaming service? (Choose two.)

OCI Streaming stores all data for 24 hours by default, but that can be extended up to 7 days.B

Although OCI Streaming automatically encrypts all data while in transit, it is the developer’s responsibility to encrypt data at rest, if needed.

The throughput of a stream is defined by a partition. A partition provides 1 MB/sec data input and 2 MB
/sec data output.

A stream can be configured with either a public or a private endpoint with support for customer managed encryption keys.

OCI Streaming can support up to 2,000 requests per second to each partition.

NEW QUESTION 18
Which statement best describes the term “cloud native”?

Cloud native refers to the process of migrating applications from on-premises infrastructure to the cloud.

Cloud native refers to the use of cloud-based development tools to build traditional on-premises applications.

Cloud native refers to the design and deployment of applications that are optimized for cloud infrastructure.

Cloud native refers to the use of cloud infrastructure to run traditional on-premises applications.

NEW QUESTION 19
Your organization has mandated that all deployed container images used for microservices must be signed by a specified master encryption key (MEK). You have appropriately signed the container images as part of your build process, but must now ensure that they are automatically verified when they are deployed to Oracle Cloud Infrastructure (OCI) Container Engine for Kubemetes (OKE) clusters. Which option should be used to mandate image verification when deploying to OKE clusters, assuming that MEK is already stored in an available OCI Vault? (Choose the best answer.)

Enable image verification policies separately for each Kubemetes pod deployment because this is enforced at the pod level.

Enable image verification policies separately for each node pool within each OKE cluster because this is enforced at the node pool level.

Enable image verification policies separately for each OKE cluster because this is enforced at the cluster level.
(Correct)

Enable Image verification policies for your OKE service control plane which will enforce this for all OKE clusters.

NEW QUESTION 20
You have two microservices, A and B, running in production. Service A relies on APIs from service B. You want to test changes to service A without deploying all of its dependencies, which include service B. Which approach should you take to test service A?

Test using API mocks.

Test the APIs in private environments.

Test against production APIs.

There is no need to explicitly test APIs.

NEW QUESTION 21
Which term describes a group formed by a master machine and a worker machine in a Kubernetes architecture?

Cluster

Node

Deployment

Container

Pod

NEW QUESTION 22
What can you use to dynamically make Kubernetes resources discoverable to public DNS servers? (Choose the best answer.)

kubeDNS

DynDNS

CoreDNS

ExternalDNS

NEW QUESTION 23
From a DevOps process standpoint, it is a good practice to keep changes to an application under version control. Which of the following allows changes to a Docker image to be stored in a version control system?

Updating docker-compose.yml

Executing docker commit

Executing docker save

Updating Dockerfile

NEW QUESTION 24
To effectively test your cloud native applications for “unknown unknowns”, you need to employ various testing and deployment strategies. Which strategy involves exposing new functionality or features to only a small set of users?

A/B Testing

Component Testing

Blue/Green Deployment

Canary Deployment

NEW QUESTION 25
You are developing a serverless application with Oracle Functions and Oracle Cloud Infrastructure Object Storage. Your function needs to read a JSON file object from an Object Storage bucket named “input-bucket” in compartment “qa-compartment”. Your corporate security standards mandate the use of Resource Principals for this use case. Which two statements are needed to implement this use case? (Choose two.)

Set up a policy to grant all functions read access to the bucket: allow all functions in compartment qa- compartment to read objects in target.bucket.name= “input-bucket’

Set up a policy to grant your user account read access to the bucket: allow user XYZ to read objects in compartment qa-compartment where target.bucket.name= “input-bucket’

Set up the following dynamic group for your function’s OCID: Name: read-file-dg Rule: resource.id =
“ocid1.fnfunc.oc1.phx.aaaaaaaakeaobctakezjz5i4ujj7g25q7sx5m vr55pms6f4da’

No policies are needed. By default, every function has read access to Object Storage buckets in the tenancy.

Set up a policy with the following statement to grant read access to the bucket: allow dynamic-group read-file-dg to read objects in compartment qa- compartment where target.bucket.name= ‘input-bucket’

NEW QUESTION 26
You need to push a new Docker container image to a repository in the Oracle Cloud Infrastructure (OCI) Registry. Which mechanism must you use to provide authentication?

Generate an API signing key to complete the authentication via the Docker CLI.

Generate an Auth Token to complete the authentication via the OCI CLI.

Generate an API signing key to complete the authentication via the OCI CLI.

Generate an Auth Token to complete the authentication via the Docker CLI.

NEW QUESTION 27
You have a containerized application that requires access to an Autonomous Transaction Processing (ATP) Database. Which option is NOT valid when the container is deployed in an OKE cluster? (Choose the best answer.)

Use Kubernetes secrets to configure environment variables on the container with ATP instance OCID, and OCI API credentials. Then use the CreateConnection API endpoint from the service runtime.

Install the Oracle Cloud Infrastructure Service Broker on the Kubernetes cluster and deploy ServiceInstance and ServiceBinding resources for ATP. Then use the specified binding name as a volume in the application deployment manifest.

Create a Kubernetes secret with contents from the instance Wallet files. Use this secret to create a volume mounted to the appropriate path in the application deployment manifest.

Enable Oracle REST Data Services for the required schemas and connect via HTTPS.

The option that is not valid for connecting to an Autonomous Transaction Processing (ATP) Database from a container in Kubernetes is: Install the Oracle Cloud Infrastructure Service Broker on the Kubernetes cluster and deploy ServiceInstance and ServiceBinding resources for ATP. Then use the specified binding name as a volume in the application deployment manifest. The Oracle Cloud Infrastructure Service Broker is not used for connecting to an ATP Database from a container in Kubernetes. The Service Broker is used for provisioning and managing cloud services directly from Kubernetes. It allows you to create and manage instances of OCI services using Kubernetes resources like ServiceInstance and ServiceBinding. To connect to an ATP Database from a container in Kubernetes, you can use one of the following valid options: Enable Oracle REST Data Services for the required schemas and connect via HTTPS. This involves enabling and configuring Oracle REST Data Services (ORDS) for the schemas in the ATP Database. You can then connect to the ATP Database using RESTful endpoints provided by ORDS. Use Kubernetes secrets to configure environment variables on the container with ATP instance OCID and OCI API credentials. Then use the CreateConnection API endpoint from the service runtime. This approach involves configuring the necessary environment variables on the container to provide the ATP instance OCID and OCI API credentials. The application can then use the OCI SDK or REST API (such as the CreateConnection endpoint) to establish a connection to the ATP Database. Create a Kubernetes secret with contents from the instance Wallet files. Use this secret to create a volume mounted to the appropriate path in the application deployment manifest. This method involves creating a Kubernetes secret that contains the necessary credentials from the ATP Database’s instance wallet files. The secret can then be mounted as a volume in the application deployment, allowing the application to access the required credentials for connecting to the ATP Database. Both options 1 and 3 provide valid approaches for connecting to an ATP Database from a container in Kubernetes, depending on the specific requirements and preferences of the application.

NEW QUESTION 28
Which is NOT a valid backend-type option available when configuring an Oracle Cloud Infrastructure (OCI) API Gateway Deployment?

HTTP_BACKEND

ORACLE STREAMS_BACKEND

ORACLE_FUNCTIONS_BACKEND

NEW QUESTION 29
Which TWO are characteristics of microservices? (Choose two.)

Microservices communicate over lightweight APIs.

Microservices can be implemented in limited number of programming languages.

All microservices share a data store.

Microservices are hard to test in isolation.

Microservices can be independently deployed.

NEW QUESTION 30
To enforce mutual TLS (mTLS) authentication for clients of your microservices, your team has chosen to leverage the Oracle Cloud Infrastructure (OCI) API Gateway service to create new API Deployments that will direct requests to your microservices. Which is NOT valid regarding the mTLS options in OCI API Gateway?

Custom CA or custom CA bundles can be added to your gateway’s trust store ONLY if they already exist in the OCI Certificates service.

Adding a custom certificate authority (CA) or custom CA bundle to your gateway’s trust store for mTLS is optional unless you need to reject certificates that do not contain particular values (such as a domain name).

The mTLS request policy can only be enabled at the API deployment specification level, which then applies globally to ALL routes in that deployment.

Once the mTLS request policy is enabled, ALL requests with valid certificates are routed to the backend unless you have defined one or more particular values (such as a domain name).

NEW QUESTION 31
Which of the following is defined as a configurable, low-latency infrastructure layer that controls the interaction between a network of microservices? (Choose the best answer.)

Containers

Kubernetes

CI/CD Pipelines

DevOps

Service Mesh

NEW QUESTION 32
With the volume of communication that can happen between different components in cloud-native applications, it is vital to not only test functionality, but also service resiliency. Which statement is true regarding service resiliency?

Resiliency is about avoiding failures.

Resiliency testing can be done only in a test environment.

Resiliency is about recovering from failures without downtime or data loss.

Resiliency is about not bringing a service to a functioning state after a failure.

NEW QUESTION 33
You have two microservices, A and B running in production. Service A relies on APIs from service B. You want to test changes to service A without deploying all of its dependencies, which includes service B. Which approach should you take to test service A?

Test using a previous test version of service B.

Test using an API mock of service B.

Test using the current production version of service B.

This is not possible because service B is a dependency.

Latest 1z0-1084-24 Actual Free Exam Questions Updated 101 Questions: https://www.exams4sures.com/Oracle/1z0-1084-24-practice-exam-dumps.html ¹

Links:

https://www.exams4sures.com/Oracle/1z0-1084-24-pra ctice-exam-dumps.html

Post date: 2024-10-03 16:38:16
Post date GMT: 2024-10-03 16:38:16

Post modified date: 2024-10-03 16:38:16
Post modified date GMT: 2024-10-03 16:38:16

Export date: Fri Mar 14 21:20:36 2025 / +0000 GMT
This page was exported from Best Free Exam Guide [ http://free.exams4sures.com ]