1z0-1084-24 exam questions for practice in 2024 Updated 101 Questions [Q20-Q36]

Rate this post

1z0-1084-24 exam questions for practice in 2024 Updated 101 Questions

Updated Sep-2024 Premium 1z0-1084-24 Exam Engine pdf – Download Free Updated 101 Questions

Q20. With the volume of communication that can happen between different components in cloud-native applications, it is vital to not only test functionality, but also service resiliency. Which statement is true regarding service resiliency?

Resiliency is about avoiding failures.

Resiliency testing can be done only in a test environment.

Resiliency is about recovering from failures without downtime or data loss.

Resiliency is about not bringing a service to a functioning state after a failure.

Q21. Your team has created a serverless application deployed in Oracle Functions. It uses a Python function leveraging the Oracle Cloud Infrastructure (OCI) Python SDK to stop any OCI compute instance that does not comply with your corporate security standards. Although there are three non-compliant OCI compute instances, when you invoke this function, none of the instances were stopped. With respect to this issue, which of the following is a valid troubleshooting strategy?

Enable function logging in the OCI console, add some print statements in your function code, and then view the logs to troubleshoot.

Enable function remote debugging in the OCI console, and then use your favorite IDE to inspect the function running on Oracle Functions.

Ensure that the application is deployed within the same OCI compartment as the instance, because you cannot enable function execution data from the OCI console.

Enable function tracing in the OCI console, and then go to the OCI Monitoring console to view the function stack trace.

The valid troubleshooting strategy in this scenario is to enable function logging in the OCI console, add some print statements in your function code, and then view the logs to troubleshoot. Enabling function logging allows you to capture and store logs generated by your function during its execution. By adding print statements or log statements in your function code, you can output relevant information and debug messages to the logs. This helps you understand the execution flow, identify any errors or issues, and gather more information about the function’s behavior. To troubleshoot the issue of the Python function not stopping the non-compliant OCI compute instances, you can follow these steps: Enable function logging in the OCI console: Enable logging for your function to ensure that logs are captured during its execution. Modify your function code: Add relevant print statements or log statements at key points in your code to output debug information or verify the execution flow. For example, you can print the instance details that are being evaluated for compliance. Invoke the function: Trigger the function execution either through an event or manually. View the logs: Access the function logs in the OCI console or retrieve them programmatically.
Look for the expected print statements or log entries that indicate the status of each instance and the decisions made by the function. By reviewing the logs, you can analyze the output and identify any issues or discrepancies. It can help you determine if the function is correctly evaluating the compliance criteria, retrieving the instance details, or making the necessary API calls to stop the instances. You may need to adjust your code logic or investigate further based on the information provided in the logs. Enabling function remote debugging is not a suitable strategy in this case because it is primarily used for inspecting and debugging the function code during development, rather than troubleshooting issues in a deployed function. Enabling function tracing can provide insights into the execution flow and performance of the function but may not directly address the issue of the instances not being stopped. Ensuring that the application is deployed within the same OCI compartment as the instance is not directly related to troubleshooting the issue with the non- compliant instances. It is a consideration for access and permissions but does not provide specific insights into the problem at hand. Remember to refer to the Oracle Functions documentation and consult the official resources for detailed instructions and best practices on troubleshooting and monitoring Oracle Functions.

Q22. Which TWO statements are true for serverless computing and serverless architectures? (Choose two.)

Serverless function execution is fully managed by third party.

Applications running on a FaaS (Functions as a Service) platform.

Long running tasks are perfectly suited for serverless.

Application DevOps team is responsible for scaling.

Serverless function state should never be stored externally.

Q23. Your organization has mandated that all deployed container images used for microservices must be signed by a specified master encryption key (MEK). You have appropriately signed the container images as part of your build process, but must now ensure that they are automatically verified when they are deployed to Oracle Cloud Infrastructure (OCI) Container Engine for Kubemetes (OKE) clusters. Which option should be used to mandate image verification when deploying to OKE clusters, assuming that MEK is already stored in an available OCI Vault? (Choose the best answer.)

Enable image verification policies separately for each Kubemetes pod deployment because this is enforced at the pod level.

Enable image verification policies separately for each node pool within each OKE cluster because this is enforced at the node pool level.

Enable image verification policies separately for each OKE cluster because this is enforced at the cluster level.
(Correct)

Enable Image verification policies for your OKE service control plane which will enforce this for all OKE clusters.

Q24. Which statement accurately describes the Oracle Cloud Infrastructure (OCI) Load Balancer integration with OCI Container Engine for Kubernetes (OKE)?

OKE service provisions an OCI Load Balancer instance for each Kubernetes service with LoadBalancer type in the YAML configuration.

OKE service provisions a single OCI Load Balancer instance shared with all the Kubernetes services with LoadBalancer type in the YAML configuration.

OCI Load Balancer instance provisioning is triggered by the OCI Events service for each Kubernetes service with LoadBalancer type in the YAML configuration.

OCI Load Balancer instance must be manually provisioned for each Kubernetes service that requires traffic balancing.

Q25. To enforce mutual TLS (mTLS) authentication for clients of your microservices, your team has chosen to leverage the Oracle Cloud Infrastructure (OCI) API Gateway service to create new API Deployments that will direct requests to your microservices. Which is NOT valid regarding the mTLS options in OCI API Gateway?

Custom CA or custom CA bundles can be added to your gateway’s trust store ONLY if they already exist in the OCI Certificates service.

Adding a custom certificate authority (CA) or custom CA bundle to your gateway’s trust store for mTLS is optional unless you need to reject certificates that do not contain particular values (such as a domain name).

The mTLS request policy can only be enabled at the API deployment specification level, which then applies globally to ALL routes in that deployment.

Once the mTLS request policy is enabled, ALL requests with valid certificates are routed to the backend unless you have defined one or more particular values (such as a domain name).

Q26. You have created a repository in Oracle Cloud Infrastructure Registry (OCIR) in the us-ashburn-1 (iad) region in your tenancy with the heyoci namespace. Which three are valid tags for an image named myapp? (Choose three.)

iad.ccir.io/heyoci/myapp:latest

iad.ocir.io/heyoci/myapp:0.0.2-beta

iad.ocir.io/heyoci/myproject/myapp:0.0.1

us-ashburn-1.ocir.io/myproject/heyoci/myapp:latest

us-ashburn-1.ocir.io/heyoci/myapp:0.0.2-beta

us-ashburn-1.ocir.io/heyoci/myproject/myapp:0.0.2-beta

Q27. You encounter an unexpected error when invoking Oracle Functions from your Cloud Shell session named myfunction in the myapp application. Which option will get you more information on the error?

fn –verbose invoke myapp myfunction

fn –debug invoke myapp myfunction

Contact Oracle support with your error message

DEBUG=1 fn invoke myapp myfunction

Q28. Which one of the following is NOT a valid backend-type supported by Oracle Cloud Infrastructure (OCI) API Gateway?

STOCK_RESPONSE_BACKEND

HTTP BACKEND

ORACLE_FUNCTIONS_BACKEND

ORACLE_STREAMS_BACKEND

Q29. Which is NOT a valid backend-type option available when configuring an Oracle Cloud Infrastructure (OCI) API Gateway Deployment?

HTTP_BACKEND

ORACLE STREAMS_BACKEND

ORACLE_FUNCTIONS_BACKEND

Q30. (CHK_4>2) Which TWO statements are NOT valid regarding the Oracle Cloud Infrastructure (OCI) Streaming service? (Choose two.)

OCI Streaming stores all data for 24 hours by default, but that can be extended up to 7 days.B

Although OCI Streaming automatically encrypts all data while in transit, it is the developer’s responsibility to encrypt data at rest, if needed.

The throughput of a stream is defined by a partition. A partition provides 1 MB/sec data input and 2 MB
/sec data output.

A stream can be configured with either a public or a private endpoint with support for customer managed encryption keys.

OCI Streaming can support up to 2,000 requests per second to each partition.

Q31. A service you are deploying to Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) uses a docker image from a private repository in OCI Registry (OCIR). Which configuration is necessary to provide access to this repository from OKE?

Create a docker-registry secret for OCIR with API key credentials on the cluster, and specify the imagePullSecret property in the application deployment manifest.

Create a docker-registry secret for OCIR with identity Auth Token on the cluster, and specify the imagePullSecret property in the application deployment manifest.

Create a dynamic group for nodes in the cluster, and a policy that allows the dynamic group to read repositories in the same compartment.

Add a generic secret on the cluster containing your identity credentials. Then specify a registryCredentials property in the deployment manifest.

Q32. Which TWO are part of the Cloud Native Computing Foundation (CNCF) container runtime? (Choose two.)

rkt-o

runc

getcd

containerd

Q33. Which testing measure should be considered when using test cases that simultaneously validate a deployment and perform a selected set of functional tasks?

Resource Utilization

Functionality

Scalability

Robust Deployment

Resiliency

Q34. You are developing a distributed application and you need a call to a path to always return a specific JSON content deploy an OCI API Gateway with the below API deployment specification. What is the correct value for type? { “routes” : [{ “path” : “/hello”, “methods” : [“Get”), “backend” : { “type” : ” —————- “, “status”
: 200, “headers” : [{ “name” : “Content-Type”, “value” : “application/json” }] “body” : “{“myjson”: ” consistent response”}” }}]}

STOCK_RESPONSE_BACKEND

CONSTANT_BACKEND

JSON_BACKEND

HTTP_BACKEND

Q35. Which is the smalled unit of Kubernetes architecture?

Node

Container

Cluster

Pod

Q36. Which two “Action Type” options are NOT available in an Oracle Cloud Infrastructure (OCI) Events rule definition? (Choose two.)

Streaming

Slack