Oracle 1Z0-1084-21 Questions and Answers Guarantee you Oass the Test Easily [Q30-Q54] : IT Certification Exam Braindumps : http://blog.braindumpsit.com

NEW QUESTION 30
A pod security policy (PSP) is implemented in your Oracle Cloud Infrastructure Container Engine for Kubernetes cluster Which rule can you use to prevent a container from running as root using PSP?

NoPrivilege

RunOnlyAsUser

MustRunAsNonRoot

forbiddenRoot

NEW QUESTION 31
In the sample Kubernetesmanifest file below, what annotations should you add to create a private load balancer In oracle Cloud infrastructure Container Engine for Kubermetes?

A)

B)

C)

D)

Option A

Option B

Option C

Option D

NEW QUESTION 32
What is the difference between blue/green and canary deployment strategies?

In blue/green, application Is deployed In minor increments to a select group of people. In canary, both old and new applications are simultaneously in production.

In blue/green, both old and new applications are in production at the same time. In canary, application is deployed Incrementally to a select group of people.

In blue/green, current applications are slowly replaced with new ones. In < MW y, Application ll deployed incrementally to a select group of people.

In blue/green, current applications are slowly replaced with new ones. In canary, both old and new applications are In production at the same time.

NEW QUESTION 33
Which two arerequired to enable Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) cluster access from the kubect1 CLI?

An SSH key pair with the public key added to cluster worker nodes

Install and configure the OCI CLI

OCI Identity and Access Management Auth Token

Tiller enabled on the OKE cluster

A configured OCI API signing key pair

NEW QUESTION 34
Who is responsiblefor patching, upgrading and maintaining the worker nodes in Oracle Cloud Infrastructure Container Engine for Kubernetes (OKE)?

It Is automated

Independent Software Vendors

Oracle Support

The user

Explanation
After a new version of Kubernetes has been released and when Container Engine for Kubernetes supports the new version, you can use Container Engine for Kubernetes to upgrade master nodes running older versions of Kubernetes. Because Container Engine for Kubernetes distributes the KubernetesControl Plane on multiple Oracle-managed master nodes (distributed across different availability domains in a region where supported) to ensure high availability, you’re able to upgrade the Kubernetes version running on master nodes with zero downtime.
Having upgraded master nodes to a new version of Kubernetes, you can subsequently create new node pools running the newer version. Alternatively, you can continue to create new node pools that will run older versions of Kubernetes (providing those older versions are compatible with the Kubernetes version running on the master nodes).
Note that you upgrade master nodes by performing an ‘in-place’ upgrade, but you upgrade worker nodes by performing an ‘out-of-place’ upgrade. To upgrade the version of Kubernetesrunning on worker nodes in a node pool, you replace the original node pool with a new node pool that has new worker nodes running the appropriate Kubernetes version. Having ‘drained’ existing worker nodes in the original node pool to prevent new pods starting and to delete existing pods, you can then delete the original node pool.
Upgrading the Kubernetes Version on Worker Nodes in a Cluster:
After a new version of Kubernetes has been released and when Container Engine for Kubernetes supports the new version, you can use Container Engine for Kubernetes to upgrade master nodes running older versions of Kubernetes. Because Container Engine for Kubernetes distributes the Kubernetes Control Plane on multiple Oracle-managed master nodes (distributed across different availability domains in a region where supported) to ensure high availability, you’re able to upgrade the Kubernetes version running on master nodes with zero downtime.
You can upgrade the version of Kubernetes running on the worker nodes in a clusterin two ways:
(A) Perform an ‘in-place’ upgrade of a node pool in the cluster, by specifying a more recent Kubernetes version for new worker nodes starting in the existing node pool. First, you modify the existing node pool’s properties to specify the morerecent Kubernetes version. Then, you ‘drain’ existing worker nodes in the node pool to prevent new pods starting, and to delete existing pods. Finally, you terminate each of the worker nodes in turn.
When new worker nodes are started in the existing node pool, they run the more recent Kubernetes version you specified. See Performing an In-Place Worker Node Upgrade by Updating anExisting Node Pool.
(B) Perform an ‘out-of-place’ upgrade of a node pool in the cluster, by replacing the original node pool with a new node pool. First, you create a new node pool with a more recent Kubernetes version. Then, you ‘drain’ existing worker nodes in the original node pool to prevent new pods starting, and to delete existing pods.
Finally, you delete the original node pool. When new worker nodes are started in the new node pool, they run the more recent Kubernetes version you specified. See Performing an Out-of-Place Worker Node Upgrade by Replacing an Existing Node Pool with a New Node Pool.
Note that in both cases:
The more recent Kubernetes version you specify for the worker nodes in the node pool must be compatible with the Kubernetes version running on the master nodes in the cluster. See Upgrading Clusters to Newer Kubernetes Versions).
You must drain existing worker nodes in the original node pool. If you don’t drain the worker nodes, workloads running onthe cluster are subject to disruption.
References:
https://docs.cloud.oracle.com/en-us/iaas/Content/ContEng/Tasks/contengupgradingk8sworkernode.htm

NEW QUESTION 35
You are tasked with developing an application that requires the use of Oracle Cloud Infrastructure (OCI) APIs to POST messages to a stream in the OCI Streaming service.
Which statement is incorrect?

The request must include an authorization signing string including (but not limited to) x-content-sha256, content-type, and content-length headers.

The Content-Type header must be Set to application/j son

An HTTP 401 will be returned if the client’s clock is skewed more than 5 minutes from the server’s.

The request does not require an Authorization header.

NEW QUESTION 36
You are working on a cloud native e-commerce application on Oracle Cloud Infrastructure (OCI). Your application architecture has multiple OCI services, including Oracle Functions. You need to trigger these functions directly from other OCI services, without having to run custom code.
Which OCI service cannot trigger your functions directly?

OCI Events Service

OCI Registry

OCI API Gateway

Oracle Integration

Explanation
Overview of Functions:
Oracle Functions is a fully managed, multi-tenant, highly scalable, on-demand, Functions-as-a-Service platform. It is built on enterprise-gradeOracle Cloud Infrastructure and powered by the Fn Project open source engine. Use Oracle Functions (sometimes abbreviated to just Functions) when you want to focus on writing code to meet business needs.
The serverless and elastic architecture of Oracle Functions means there’s no infrastructure administration or software administration for you to perform. You don’t provision or maintain compute instances, and operating system software patches and upgrades are applied automatically. Oracle Functions simply ensures your app is highly-available, scalable, secure, and monitored. With Oracle Functions, you can write code in Java, Python, Node, Go, and Ruby (and for advanced use cases, bring your own Dockerfile, and Graal VM).
You can invoke a function that you’vedeployed to Oracle Functions from:
– The Fn Project CLI.
– The Oracle Cloud Infrastructure SDKs.
– Signed HTTP requests to the function’s invoke endpoint. Every function has an invoke endpoint.
– Other Oracle Cloud services (for example, triggered by an event in the Events service) or from external services.
so You can then deploy your code, call it directly or trigger it in response to events, and get billed only for the resources consumed during the execution.
Invoking Oracle Functions from Other OracleCloud Infrastructure Services:
You can invoke functions in Oracle Functions from other Oracle Cloud Infrastructure services. Typically, you’ll want an event in another service to trigger a request to invoke a function defined in Oracle Functions.
This functionality is currently available in:
A:The Events service. For more information, see Overview of Events.
B:The Notifications service. For more information, see Notifications Overview. For a scenario, see Scenario A: Automatically Resize VMs.
C:The API Gateway service. For more information, see Adding a Function in Oracle Functions as an API Gateway Back End.
D:The Oracle Integration service, using the OCI Signature Version 1 security policy. For more information, see Configure Oracle Integration to CallOracle Cloud Infrastructure Functions with the REST Adapter in Using the REST Adapter with Oracle Integration.

so OCI Registry services cannot trigger yourfunctions directly
References:
https://docs.cloud.oracle.com/en-us/iaas/Content/Functions/Tasks/functionsintegratingwithother.htm
https://docs.cloud.oracle.com/en-us/iaas/Content/Functions/Concepts/functionsoverview.htm
https://blogs.oracle.com/cloud-infrastructure/announcing-notifications-triggers-for-serverless-functions

NEW QUESTION 37
What is the open source engine for Oracle Functions?

Apache OpenWhisk

OpenFaaS

Fn Project

Knative

NEW QUESTION 38
You are building a cloud native, serverless travel application with multiple Oracle Functions in Java, Python and Node.js. You need to build and deploy these functions to a single applications named travel-app.
Which command will help you complete this task successfully?

oci fn function deploy –ap travel-ap –all

fn -v deploy –ap travel-ap — all

oci fn application –application-name-ap deploy –all

fn function deploy –all –application-name travel-ap

NEW QUESTION 39
You are deploying an API via Oracle Cloud Infrastructure (OCI) API Gateway and you want to implement request policies to control access Which is NOT available in OCI API Gateway?

Limiting the number of requests sent to backend services

Enabling CORS (Cross-Origin Resource Sharing) support

Providing authentication and authorization

Controlling access to OCI resources

NEW QUESTION 40
You are developing a serverless application with Oracle Functions. Your function needs to store state in a database. Your corporate security Standards mandate encryption of secret information like database passwords.
As a function developer, which approach should you follow to satisfy this security requirement?

Use the Oracle Cloud Infrastructure Console and enter the password in the function configuration section in the provided input field.

Use Oracle Cloud Infrastructure Key Management to auto-encrypt the password. It will inject the auto-decrypted password inside your function container.

Encrypt the password using Oracle Cloud Infrastructure Key Management. Decrypt this password in your function code withthe generated key.

All function configuration variables are automatically encrypted by Oracle Functions.

NEW QUESTION 41
Which two are benefits of distributed systems?

Privacy

Security

Ease of testing

Scalability

Resiliency

Explanation
distributed systems of native-cloud like functions that have a lot of benefit like Resiliency and availability Resiliency andavailability refers to the ability of a system to continue operating, despite the failure or sub-optimal performance of some of its components.
In the case of Oracle Functions:
The control plane is a set of components that manages function definitions.
Thedata plane is a set of components that executes functions in response to invocation requests.
For resiliency and high availability, both the control plane and data plane components are distributed across different availability domains and fault domains ina region. If one of the domains ceases to be available, the components in the remaining domains take over to ensure that function definition management and execution are not disrupted.
When functions are invoked, they run in the subnets specified for theapplication to which the functions belong.
For resiliency and high availability, best practice is to specify a regional subnet for an application (or alternatively, multiple AD-specific subnets in different availability domains). If an availability domainspecified for an application ceases to be available, Oracle Functions runs functions in an alternative availability domain.
Concurrency and Scalability
Concurrency refers to the ability of a system to run multiple operations in parallel using shared resources.
Scalability refers to the ability of the system to scale capacity (both up and down) to meet demand.
In the case of Functions, when a function is invoked for the first time, the function’s image is run as a container on an instance in a subnetassociated with the application to which the function belongs. When the function is executing inside the container, the function can read from and write to other shared resources and services running in the same subnet (for example, Database as a Service).The function can also read from and write to other shared resources (for example, Object Storage), and other Oracle Cloud Services.
If Oracle Functions receives multiple calls to a function that is currently executing inside a running container, Oracle Functions automatically and seamlessly scales horizontally to serve all the incoming requests. Oracle Functions starts multiple Docker containers, up to the limit specified for your tenancy. The default limit is 30 GB of RAM reserved for function execution per availability domain, although you can request an increase to this limit. Provided the limit is not exceeded, there is no difference in response time (latency) between functions executing on the different containers.

NEW QUESTION 42
Which statement accurately describes Oracle Cloud Infrastructure (OCI) Load Balancer integration with OCI Container Engine for Kubernetes (OKE)?

OKE service provisions an OCI Load Balancer instance for each Kubernetes service with LoadBalancer type in the YAML configuration.

OCI Load Balancer instance provisioning is triggered by OCI Events service for each Kubernetes service with LoadBalancer type in the YAML configuration.

OCI Load Balancer instance must be manually provisioned for each Kubernetesservice that requires traffic balancing.

OKE service provisions a single OCI Load Balancer instance shared with all the Kubernetes services with LoadBalancer type in the YAML configuration.

NEW QUESTION 43
A developer using Oracle Cloud Infrastructure (OCI) API Gateway must authenticate the API requests to their web application. The authentication process must be implementedusing a custom scheme which accepts string parameters from the API caller. Which method can the developer use In this scenario?

Create an authorizer function using request header authorization.

Create an authorizer function using token-based authorization.

Create a cross account functions authorizer.

Create an authorizer function using OCI Identity and Access Management based authentication

Explanation
Using Authorizer Functions to Add Authentication and Authorization to API Deployments:
You can control access to APIs you deploy to API gateways using an ‘authorizer function’ (as described in this topic), or using JWTs (as described in Using JSON Web Tokens (JWTs) to Add Authentication and Authorization to API Deployments).
You can add authentication and authorization functionality to API gateways by writing an ‘authorizer function’ that:
1. Processes request attributes to verify the identity of a caller with an identity provider.
2.Determines the operations that the caller is allowed to perform.
3.Returns the operations the caller is allowed to perform asa list of ‘access scopes’ (an ‘access scope’ is an arbitrary string used to determine access).
Optionally returns a key-value pair for use by the API deployment. For example, as a context variable for use in an HTTP back end definition (see Adding Context Variables to Policies and HTTP Back End Definitions).
Create an authorizerfunction using request header authorization implemented using a custom scheme which accepts string parameters from the API caller.
Managing Input Parameters
In our case we will need to manage quite a few static parameters in our code. For example the URLs of the secrets service endpoints, the username and other constant parameterised data. We can manage these either at Application or Function level (an OCI Function is packaged in an Application which can contain multiple Functions). In this case I will create function level parameters. You can use the following command to create the parameters:
fn config function test idcs-assert idcsClientId aedc15531bc8xxxxxxxxxxbd8a193

References:
https://technology.amis.nl/2020/01/03/oracle-cloud-api-gateway-using-an-authorizer-function-for-client-secret-a
https://docs.cloud.oracle.com/en-us/iaas/Content/APIGateway/Tasks/apigatewayusingauthorizerfunction.htm
https://www.ateam-oracle.com/how-to-implement-an-oci-api-gateway-authorization-fn-in-nodejs-that-accesses-o

NEW QUESTION 44
Your Oracle Cloud Infrastructure Container Engine for Kubernetes (OKE) administrator has created an OKE cluster with one node pool in a public subnet. You have been asked to provide a log file from one of the nodes for troubleshooting purpose.
Which step should you take to obtain the log file?

ssh into the node using public key.

ssh into the nodes using private key.

It is impossible since OKE is a managed Kubernetes service.

Use the username open and password to login.

NEW QUESTION 45
Which is NOT a supported SDk Oracle Cloud Infrastructure (OCI)?

Go SDK

Java SDK

NET SDK

Ruby SDK

Python SDK

NEW QUESTION 46
Which statements is incorrect with regards to the Oracle Cloud Infrastructure (OCI) Notifications service?

Notification topics may be assigned as the action performed by an OCI Events configuration.

OCI Alarms can be configured to publish to a notification topic when triggered.

An OCI function may subscribe to anotification topic.

A subscription can forward notifications to an HTTPS endpoint.

A subscription can integrate with PagerDuty events.

It may be used to receive an email each time an OCI Autonomous Database backup is completed.

NEW QUESTION 47
You have deployed a Python application on Oracle Cloud Infrastructure Container Engine for Kubernetes.
However, during testing you found a bug that you rectified and created a new Docker image. You need to make sure that if this new Image doesn’t work then you can roll back to the previous version.
Using kubectl, which deployment strategies should you choose?

Rolling Update

Canary Deployment

Blue/Green Deployment

A/B Testing

NEW QUESTION 48
With the volume of communication that can happen betweendifferent components in cloud-native applications, it is vital to not only test functionality, but also service resiliency.
Which statement is true with regards to service resiliency?

Resiliency is about recovering from failures without downtime or dataloss.

A goal of resiliency is not to bring a service to a functioning state after a failure.

Resiliency testing can be only done in a test environment.

Resiliency is about avoiding failures.

NEW QUESTION 49
You are building a container image and pushing it to the Oracle Cloud Infrastructure Registry (OCIR). You need to make sure that these get deleted from the repository.
Which action should you take?

Create a group and assign a policy to perform lifecycle operations on images.

Set global policy of image retention to “Retain All Images”.

In your compartment, write a policy to limit accessto the specific repository.

Edit the tenancy global retention policy.

NEW QUESTION 50
Which two statements are true for service choreography?

Service choreographer is responsible for invoking other services.

Services involved in choreography communicate through messages/messaging systems.

Service choreography relies on a central coordinator.

Service choreography should not useevents for communication.

Decision logic in service choreography is distributed.

NEW QUESTION 51
What can you use to dynamically make Kubernetes resources discoverable topublic DNS servers?

ExternalDNS

CoreDNS

DynDNS

kubeDNS

NEW QUESTION 52
Which two statements are true for serverless computing and serverless architectures?

Long running tasks are perfectly suited for serverless

Serverless function state should never be stored externally

Application DevOps team is responsible for scaling

Serverless function execution is fully managed by a third party

Applications running on a FaaS (Functions as a Service) platform

NEW QUESTION 53
You encounter an unexpected error when invoking the Oracle Function named “myfunction” in application
“myapp”. Which can you use to get more information on the error?

fn –debug invoke myapp myfunction

DEBOG=1 fn invoke myapp myfunction

fn –verbose invoke myapp myfunction

Call Oracle support with your error message

NEW QUESTION 54
Which testingapproaches is a must for achieving high velocity of deployments and release of cloud-native applications?

Integration testing

A/B testing

Automated testing

Penetration testing

Oracle 1Z0-1084-21 Questions and Answers Guarantee you Oass the Test Easily [Q30-Q54]

Oracle 1Z0-1084-21 Exam Syllabus Topics: