[May-2026] 1Z0-1084-25 Exam Dumps – Free Demo & 365 Day Updates [Q23-Q46]

5/5 - (1 vote)

[May-2026] 1Z0-1084-25 Exam Dumps – Free Demo & 365 Day Updates

Free Sales Ending Soon – Use Real 1Z0-1084-25 PDF Questions

Oracle 1Z0-1084-25 Exam Syllabus Topics:

Topic	Details
Topic 1	Monitoring & Troubleshooting Cloud-Native Applications: This section of the exam focuses on monitoring and troubleshooting cloud-native applications. It covers using OCI Monitoring to track metrics, OCI Logging for managing logs and performing tasks related to monitoring, logging, and tracing for better observability and issue resolution.
Topic 2	Cloud Native Applications and Containerization: This section of the exam covers containerization technologies for cloud-native applications. It explains Docker architecture, its components, and the process of pulling and pushing container images using Oracle Cloud Infrastructure Registry (OCIR). It also explores container orchestration, deploying applications on Oracle Kubernetes Engine (OKE), and using OCI Service Mesh for Kubernetes deployments.
Topic 3	Cloud Native Fundamentals: This section of the exam measures the skills of target audience and covers the essential principles of cloud-native development. It explains the core concepts, key pillars, and advantages of cloud-native applications. The section also focuses on microservices architecture, including its design methodology and how it supports scalable, distributed applications.
Topic 4	Testing and Securing Cloud-Native Applications: This section focuses on testing strategies and security for cloud-native applications. It discusses different testing methodologies, securing sensitive information using OCI Vault, and implementing security measures to address cloud-native development challenges.
Topic 5	Leveraging Serverless Technologies for Cloud Native Development: This section of the exam measures the skills of professionals in serverless development within OCI. It covers creating serverless applications using Oracle Functions, building API gateways for routing traffic, and integrating systems through OCI Streaming Service. Additionally, it explores event-driven architectures using OCI Event Service and how OCI Queue enables asynchronous messaging between microservices.

NEW QUESTION 23
You have created a repository in Oracle Cloud Infrastructure Registry (OCIR) in the us-ashburn-1 (iad) region in your tenancy with the heyoci namespace. Which three are valid tags for an image named myapp? (Choose three.)

iad.ccir.io/heyoci/myapp:latest

iad.ocir.io/heyoci/myapp:0.0.2-beta

iad.ocir.io/heyoci/myproject/myapp:0.0.1

us-ashburn-1.ocir.io/myproject/heyoci/myapp:latest

us-ashburn-1.ocir.io/heyoci/myapp:0.0.2-beta

us-ashburn-1.ocir.io/heyoci/myproject/myapp:0.0.2-beta

NEW QUESTION 24
Which testing measure should be considered when using test cases that simultaneously validate a deployment and perform a selected set of functional tasks?

Resource Utilization

Functionality

Scalability

Robust Deployment

Resiliency

NEW QUESTION 25
You are developing a distributed application and you need a call to a path to always return a specific JSON content deploy an OCI API Gateway with the below API deployment specification. What is the correct value for type? { “routes” : [{ “path” : “/hello”, “methods” : [“Get”), “backend” : { “type” : ” —————- “, “status” : 200, “headers” : [{ “name” : “Content-Type”, “value” : “application/json” }] “body” : “{“myjson”: “consistent response”}” }}]}

STOCK_RESPONSE_BACKEND

CONSTANT_BACKEND

JSON_BACKEND

HTTP_BACKEND

NEW QUESTION 26
Your team has chosen to use master encryption key (MEK) within an Oracle Cloud Infrastructure (OCI) Vault for encrypting Kubernetes secrets associated with your microservice deployments in OCI Container Engine for Kubernetes (OKE) clusters so that you can easily manage key rotation. Which of the following is NOT valid about rotating keys in the OCI Vault service?

Once rotated, older key versions can be used for encryption until they are deleted.

Both software and HSM-protected MEKS can be rotated.

When you rotate an MEK, a new key version is automatically generated.

Each key version is tracked internally with separate unique OCIDS.

NEW QUESTION 27
You are a developing a microservices application that will be a consumer of the Oracle Cloud Infrastructure (OCI) Streaming service. Which API method should you use to read and process a stream?

GetStream

ReadMessages

ProcessStream

ReadStream

GetMessages

NEW QUESTION 28
Which two “Action Type” options are NOT available in an Oracle Cloud Infrastructure (OCI) Events rule definition? (Choose two.)

Notifications

Functions

Slack

Streaming

NEW QUESTION 29
Which testing strategy achieves high velocity of deployments and releases of cloud native applications? (Choose the best answer.)

Penetration testing

Automated testing

Integration testing

A/B testing

NEW QUESTION 30
Which one of the following is NOT a valid backend-type supported by Oracle Cloud Infrastructure (OCI) API Gateway?

STOCK_RESPONSE_BACKEND

HTTP BACKEND

ORACLE_FUNCTIONS_BACKEND

ORACLE_STREAMS_BACKEND

NEW QUESTION 31
In the shared responsibility model, who should perform patching, upgrading, and maintaining of the worker nodes in provisioned Oracle Container Engine for Kubernetes (OKE) clusters?

Oracle Support does it.

It is the responsibility of the customer.

It is an automated process.

NEW QUESTION 32
To enforce mutual TLS (mTLS) authentication for clients of your microservices, your team has chosen to leverage the Oracle Cloud Infrastructure (OCI) API Gateway service to create new API Deployments that will direct requests to your microservices. Which is NOT valid regarding the mTLS options in OCI API Gateway?

Custom CA or custom CA bundles can be added to your gateway’s trust store ONLY if they already exist in the OCI Certificates service.

Adding a custom certificate authority (CA) or custom CA bundle to your gateway’s trust store for mTLS is optional unless you need to reject certificates that do not contain particular values (such as a domain name).

The mTLS request policy can only be enabled at the API deployment specification level, which then applies globally to ALL routes in that deployment.

Once the mTLS request policy is enabled, ALL requests with valid certificates are routed to the backend unless you have defined one or more particular values (such as a domain name).

NEW QUESTION 33
You have two microservices, A and B, running in production. Service A relies on APIs from service B. You want to test changes to service A without deploying all of its dependencies, which include service B. Which approach should you take to test service A?

Test using API mocks.

Test the APIs in private environments.

Test against production APIs.

There is no need to explicitly test APIs.

NEW QUESTION 34
How are cloud native application versions deployed to an OKE cluster when using a blue/green deployment strategy?

Current applications are slowly replaced with new application versions.

New application versions are deployed in minor increments to a select group of people.

Both old and new application versions are deployed to production at the same time.

NEW QUESTION 35
A developer has created another version of a microservice and wants 10% of the traffic to flow towards it for testing purposes. The application is already configured using OCI (Oracle Cloud Infrastructure) Service Mesh. Which of the following steps is the right approach to achieve this goal?

Create a new Kubernetes deployment for the new version of the microservice and set the traffic splitting percentage to 10% in the Kubernetes service manifest.

Use Kubernetes HPA (Horizontal Pod Autoscaler) to scale the new version of the microservice to handle 10% of the traffic automatically.

Create a new entry in the routeRules field of the ingress gateway route table manifest to configure traffic splitting between the old and new versions of the microservice and set the percentage to 10%.

Create a new entry in the routeRules field of the virtual service route table manifest to configure traffic splitting between the old and new versions of the microservice and set the percentage to 10%.

NEW QUESTION 36
Which kubectl command syntax is valid for implementing a rolling update deployment strategy in Kubernetes? (Choose the best answer.)

kubectl upgrade -c <container> –image=image:v2

kubectl update <deployment-name> –image=image:v2

kubectl rolling-update <deployment-name> –image=image:v2

kubectl update -c <container> –iniage=image: v2

NEW QUESTION 37
A Docker image consists of one or more layers, each of which represents a Dockerfile instruction. The layers are stacked and each one is a delta of the changes from the previous layer. What permission is associated with these layers?

read mostly

write only

movable

read only

write once

NEW QUESTION 38
Which “Action Type” option is NOT available in an Oracle Cloud Infrastructure (OCI) Events rule definition?

Streaming

Notifications

Functions

NEW QUESTION 39
Which statement about microservices is FALSE?

They are typically designed around business capabilities.

It is fairly common for them to communicate with HTTP.

Multiple microservices can run in one process.

They are independently deployable.

NEW QUESTION 40
You encounter an unexpected error when invoking Oracle Functions from your Cloud Shell session named myfunction in the myapp application. Which option will get you more information on the error?

fn –verbose invoke myapp myfunction

fn –debug invoke myapp myfunction

Contact Oracle support with your error message

DEBUG=1 fn invoke myapp myfunction

NEW QUESTION 41
A company is developing a new application that needs to process transactions in real time. The company wants to ensure that all transactions are processed in order and that no transaction is lost. Which of these is a correct strategy for leveraging OCI Queue in this scenario?

Use a separate queue for each type of transaction.

Use a single queue to process all transactions.

Use a separate queue for each application instance.

Use a priority queue to prioritize requests.

NEW QUESTION 42
Which of the following TWO statements are TRUE about deleting a Kubernetes cluster? (Choose two.)

Upon deleting a cluster, other resources created during the cluster creation process or associated with the cluster (such as VCNS, Internet Gateways, NAT Gateways, Route Tables, Security Lists, B. Load Balancers, and Block Volumes) are deleted automatically.

If you change the auto-generated name of a worker node and then delete the cluster, the renamed worker node is not deleted.

Upon deleting a cluster, no other resources created during the cluster creation process or associated with the cluster (such as VCNS. Internet Gateways, NAT Gateways, Route Tables, Security Lists. Load Balancers, and Block Volumes) are deleted automatically.

Changing the auto-generated name of a worker node does not affect the deletion of the worker node when the cluster in which it is created is deleted.

You cannot change the autogenerated names of the worker nodes in the format oke-c<part-of cluster- CCID>-<part-of-node-pool-OCID>-<part-of-subnet-OCID>-<slot> within a Kubernetes cluster.

NEW QUESTION 43
Your Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) administrator has created an OKE cluster with one node pool in a public subnet. You have been asked to provide a log file from one of the nodes for troubleshooting purpose. Which step should you take to obtain the log file?

Use the username opc and password to login.

It is impossible because OKE is a managed Kubernetes service.

SSH into the nodes using the private key.

SSH into the node using the public key.

NEW QUESTION 44
You are instructed to automate manual tasks and help software teams manage complex environments at scale using the Oracle Cloud Infrastructure (OCI) services. Which THREE OCI services can be leveraged to securely store and version your application’s source code, and automate the building, testing, and deployment of applications to the OCI platform? (Choose three.)

DevOps

Container Engine for Kubernetes

Oracle APEX Application Development

Resource Manager

Oracle Cloud Infrastructure Registry

Oracle Cloud Logging Analytics

NEW QUESTION 45
Your organization has mandated that all deployed container images used for microservices must be signed by a specified master encryption key (MEK). You have appropriately signed the container images as part of your build process, but must now ensure that they are automatically verified when they are deployed to Oracle Cloud Infrastructure (OCI) Container Engine for Kubemetes (OKE) clusters. Which option should be used to mandate image verification when deploying to OKE clusters, assuming that MEK is already stored in an available OCI Vault? (Choose the best answer.)

Enable image verification policies separately for each Kubemetes pod deployment because this is enforced at the pod level.

Enable image verification policies separately for each node pool within each OKE cluster because this is enforced at the node pool level.

Enable image verification policies separately for each OKE cluster because this is enforced at the cluster level.
(Correct)

Enable Image verification policies for your OKE service control plane which will enforce this for all OKE clusters.

NEW QUESTION 46
Your team has created a serverless application deployed in Oracle Functions. It uses a Python function leveraging the Oracle Cloud Infrastructure (OCI) Python SDK to stop any OCI compute instance that does not comply with your corporate security standards. Although there are three non-compliant OCI compute instances, when you invoke this function, none of the instances were stopped. With respect to this issue, which of the following is a valid troubleshooting strategy?

Enable function logging in the OCI console, add some print statements in your function code, and then view the logs to troubleshoot.

Enable function remote debugging in the OCI console, and then use your favorite IDE to inspect the function running on Oracle Functions.

Ensure that the application is deployed within the same OCI compartment as the instance, because you cannot enable function execution data from the OCI console.

Enable function tracing in the OCI console, and then go to the OCI Monitoring console to view the function stack trace.

The valid troubleshooting strategy in this scenario is to enable function logging in the OCI console, add some print statements in your function code, and then view the logs to troubleshoot. Enabling function logging allows you to capture and store logs generated by your function during its execution. By adding print statements or log statements in your function code, you can output relevant information and debug messages to the logs. This helps you understand the execution flow, identify any errors or issues, and gather more information about the function’s behavior. To troubleshoot the issue of the Python function not stopping the non-compliant OCI compute instances, you can follow these steps: Enable function logging in the OCI console: Enable logging for your function to ensure that logs are captured during its execution. Modify your function code: Add relevant print statements or log statements at key points in your code to output debug information or verify the execution flow. For example, you can print the instance details that are being evaluated for compliance. Invoke the function: Trigger the function execution either through an event or manually. View the logs: Access the function logs in the OCI console or retrieve them programmatically. Look for the expected print statements or log entries that indicate the status of each instance and the decisions made by the function. By reviewing the logs, you can analyze the output and identify any issues or discrepancies. It can help you determine if the function is correctly evaluating the compliance criteria, retrieving the instance details, or making the necessary API calls to stop the instances. You may need to adjust your code logic or investigate further based on the information provided in the logs. Enabling function remote debugging is not a suitable strategy in this case because it is primarily used for inspecting and debugging the function code during development, rather than troubleshooting issues in a deployed function. Enabling function tracing can provide insights into the execution flow and performance of the function but may not directly address the issue of the instances not being stopped. Ensuring that the application is deployed within the same OCI compartment as the instance is not directly related to troubleshooting the issue with the non-compliant instances. It is a consideration for access and permissions but does not provide specific insights into the problem at hand. Remember to refer to the Oracle Functions documentation and consult the official resources for detailed instructions and best practices on troubleshooting and monitoring Oracle Functions.