1z0-1084-22 certified questions – Prepaway Exam Dumps

1z0-1084-22 Free Exam Questions and Answers PDF Updated on Dec-2022

Latest 1z0-1084-22 Exam Dumps Recently Updated 75 Questions

Oracle 1z0-1084-22 Exam Syllabus Topics:

Topic	Details
Topic 1	Monitoring & Troubleshooting Cloud Native Applications Perform Tasks around Monitoring, Logging, and Tracing
Topic 2	Use OCI Logging service to enable, manage, and search logs Testing and Securing Cloud Native Applications
Topic 3	Explain cloud native testing and discuss measures for testing cloud native applications Develop Serverless Application with Oracle Functions
Topic 4	Create integration between systems using OCI streaming service Explain the microservices architecture and discuss the design methodology of microservices
Topic 5	Build event-driven serverless applications using OCI event service Explain DevOps and discuss the role of container orchestration
Topic 6	Apply security measures to overcome challenges with cloud native development Explain docker and the concepts around its architecture and components

NO.41 Your organization uses a federated identity provider to login to your Oracle Cloud Infrastructure (OCI) environment. As a developer, you are writing a script to automate some operation and want to use OCI CLI to do that. Your security team doesn’t allow storing private keys on local machines.
How can you authenticate with OCI CLI?

Run oci setup keys and provide your credentials

Run oci session refresh -profile <profile_name>

Run oci session authenticate and provide your credentials

Run oci setup oci-cli-rc -file path/to/target/file

NO.42 Which concepthe following steps reference Console instructionsCloud Infrastructure Resource Manager?

Job

Stack

Queue

Plan

https://docs.cloud.oracle.com/en-us/iaas/Content/ResourceManager/Concepts/resourcemanager.htm Following are brief descriptions of key concepts and the main components of Resource Manager.
CONFIGURATION
Information to codify your infrastructure. A Terraform configuration can be either a solution or a file that you write and upload.
JOB
Instructions to perform the actions defined in your configuration. Only one job at a time can run on a given stack; further, you can have only one set of Oracle Cloud Infrastructure resources on a given stack. To provision a different set of resources, you must create a separate stack and use a different configuration.
Resource Manager provides the following job types:
Plan: Parses your Terraform configuration and creates an execution plan for the associated stack. The execution plan lists the sequence of specific actions planned to provision your Oracle Cloud Infrastructure resources. The execution plan is handed off to the apply job, which then executes the instructions.
Apply. Applies the execution plan to the associated stack to create (or modify) your Oracle Cloud Infrastructure resources. Depending on the number and type of resources specified, a given apply job can take some time. You can check status while the job runs.
Destroy. Releases resources associated with a stack. Released resources are not deleted. For example, terminates a Compute instance controlled by a stack. The stack’s job history and state remain after running a destroy job. You can monitor the status and review the results of a destroy job by inspecting the stack’s log files.
Import State. Sets the provided Terraform state file as the current state of the stack. Use this job to migrate local Terraform environments to Resource Manager.
STACK
The collection of Oracle Cloud Infrastructure resources corresponding to a given Terraform configuration. Each stack resides in the compartment you specify, in a single region; however, resources on a given stack can be deployed across multiple regions. An OCID is assigned to each stack.
the following steps reference Console instructions
Create a Terraform configuration.
Create a stack.
Run a plan job, which produces an execution plan.
Review the execution plan.
If changes are needed in the execution plan, update the configuration and run a plan job again.
Run an apply job to provision resources.
Review state file and log files, as needed.
You can optionally reapply your configuration, with or without making changes, by running an apply job again.
Optionally, to release the resources running on a stack, run a destroy job.

NO.43 A developer using Oracle Cloud Infrastructure (OCI) API Gateway must authenticate the API requests to their web application. The authentication process must be implemented using a custom scheme which accepts string parameters from the API caller. Which method can the developer use In this scenario?

Create an authorizer function using request header authorization.

Create an authorizer function using token-based authorization.

Create a cross account functions authorizer.

Create an authorizer function using OCI Identity and Access Management based authentication

Using Authorizer Functions to Add Authentication and Authorization to API Deployments:
You can control access to APIs you deploy to API gateways using an ‘authorizer function’ (as described in this topic), or using JWTs (as described in Using JSON Web Tokens (JWTs) to Add Authentication and Authorization to API Deployments).
You can add authentication and authorization functionality to API gateways by writing an ‘authorizer function’ that:
1. Processes request attributes to verify the identity of a caller with an identity provider.
2.Determines the operations that the caller is allowed to perform.
3.Returns the operations the caller is allowed to perform as a list of ‘access scopes’ (an ‘access scope’ is an arbitrary string used to determine access).
Optionally returns a key-value pair for use by the API deployment. For example, as a context variable for use in an HTTP back end definition (see Adding Context Variables to Policies and HTTP Back End Definitions).
Create an authorizer function using request header authorization implemented using a custom scheme which accepts string parameters from the API caller.
Managing Input Parameters
In our case we will need to manage quite a few static parameters in our code. For example the URLs of the secrets service endpoints, the username and other constant parameterised data. We can manage these either at Application or Function level (an OCI Function is packaged in an Application which can contain multiple Functions). In this case I will create function level parameters. You can use the following command to create the parameters:
fn config function test idcs-assert idcsClientId aedc15531bc8xxxxxxxxxxbd8a193

References:
https://technology.amis.nl/2020/01/03/oracle-cloud-api-gateway-using-an-authorizer-function-for-client-secret-authorization-on-api-access/
https://docs.cloud.oracle.com/en-us/iaas/Content/APIGateway/Tasks/apigatewayusingauthorizerfunction.htm
https://www.ateam-oracle.com/how-to-implement-an-oci-api-gateway-authorization-fn-in-nodejs-that-accesses-oci-resources

NO.44 Which two handle Oracle Functions authentication automatically?

Oracle Cloud Infrastructure SDK

cURL

Oracle Cloud Infrastructure CLl

Signed HTTP Request

Fn Project CLI

NO.45 A leading insurance firm is hosting its customer portal in Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes with an OCI Autonomous Database. Their support team discovered a lot of SQL injection attempts and cross-site scripting attacks to the portal, which is starting to affect the production environment.
What should they implement to mitigate this attack?

Network Security Lists

Network Security Groups

Network Security Firewall

Web Application Firewall

NO.46 With the volume of communication that can happen between different components in cloud-native applications, it is vital to not only test functionality, but also service resiliency.
Which statement is true with regards to service resiliency?

Resiliency is about recovering from failures without downtime or data loss.

A goal of resiliency is not to bring a service to a functioning state after a failure.

Resiliency testing can be only done in a test environment.

Resiliency is about avoiding failures.

NO.47 You encounter an unexpected error when invoking the Oracle Function named “myfunction” in application “myapp”. Which can you use to get more information on the error?

fn –debug invoke myapp myfunction

DEBOG=1 fn invoke myapp myfunction

fn –verbose invoke myapp myfunction

Call Oracle support with your error message

NO.48 You are a consumer of Oracle Cloud Infrastructure (OCI) Streaming service. Which API should you use to read and process the stream?

ListMessages

GetMessages

GetObject

ReadMessages

NO.49 Which two “Action Type” options are NOT available in an Oracle Cloud Infrastructure (OCI) Events rule definition?

Notifications

Functions

Streaming

Slack

NO.50 Which is NOT a supported SDK on Oracle Cloud Infrastructure (OCI)?

Ruby SDK

Java SDK

Python SDK

Go SDK

.NET SDK

NO.51 In the sample Kubernetes manifest file below, what annotations should you add to create a private load balancer In oracle Cloud infrastructure Container Engine for Kubermetes?

A)

B)

C)

D)

Option A

Option B

Option C

Option D

NO.52 A service you are deploying to Oracle infrastructure (OCI) Container En9ine for Kubernetes (OKE) uses a docker image from a private repository Which configuration is necessary to provide access to this repository from OKE?

Add a generic secret on the cluster containing your identity credentials. Then specify a registrycredentials property in the deployment manifest.

Create a docker-registry secret for OCIR with API key credentials on the cluster, and specify the imagepullsecret property in the application deployment manifest.

Create a docker-registry secret for OCIR with identity Auth Token on the cluster, and specify the image pull secret property in the application deployment manifest.

Create a dynamic group for nodes in the cluster, and a policy that allows the dynamic group to read repositories in the same compartment.

Pulling Images from Registry during Deployment
During the deployment of an application to a Kubernetes cluster, you’ll typically want one or more images to be pulled from a Docker registry. In the application’s manifest file you specify the images to pull, the registry to pull them from, and the credentials to use when pulling the images. The manifest file is commonly also referred to as a pod spec, or as a deployment.yaml file (although other filenames are allowed).
If you want the application to pull images that reside in Oracle Cloud Infrastructure Registry, you have to perform two steps:
– You have to use kubectl to create a Docker registry secret. The secret contains the Oracle Cloud Infrastructure credentials to use when pulling the image. When creating secrets, Oracle strongly recommends you use the latest version of kubectl To create a Docker registry secret:
1- If you haven’t already done so, follow the steps to set up the cluster’s kubeconfig configuration file and (if necessary) set the KUBECONFIG environment variable to point to the file. Note that you must set up your own kubeconfig file. You cannot access a cluster using a kubeconfig file that a different user set up.
2- In a terminal window, enter:
$ kubectl create secret docker-registry <secret-name> –docker-server=<region-key>.ocir.io –docker-username='<tenancy-namespace>/<oci-username>’ –docker-password='<oci-auth-token>’ –docker-email='<email-address>’ where:
<secret-name> is a name of your choice, that you will use in the manifest file to refer to the secret . For example, ocirsecret
<region-key> is the key for the Oracle Cloud Infrastructure Registry region you’re using. For example, iad. See Availability by Region.
ocir.io is the Oracle Cloud Infrastructure Registry name.
<tenancy-namespace> is the auto-generated Object Storage namespace string of the tenancy containing the repository from which the application is to pull the image (as shown on the Tenancy Information page). For example, the namespace of the acme-dev tenancy might be ansh81vru1zp. Note that for some older tenancies, the namespace string might be the same as the tenancy name in all lower-case letters (for example, acme-dev).
<oci-username> is the username to use when pulling the image. The username must have access to the tenancy specified by <tenancy-name>. For example, [email protected] . If your tenancy is federated with Oracle Identity Cloud Service, use the format oracleidentitycloudservice/<username>
<oci-auth-token> is the auth token of the user specified by <oci-username>. For example, k]j64r{1sJSSF-;)K8
<email-address> is an email address. An email address is required, but it doesn’t matter what you specify. For example, [email protected]
– You have to specify the image to pull from Oracle Cloud Infrastructure Registry, including the repository location and the Docker registry secret to use, in the application’s manifest file.
References:
https://docs.cloud.oracle.com/en-us/iaas/Content/Registry/Tasks/registrypullingimagesfromocir.htm

NO.53 You need to execute a script on a remote instance through Oracle Cloud Infrastructure Resource Manager. Which option can you use?

Use /bin/sh with the full path to the location of the script to execute the script.

It cannot be done.

Download the script to a local desktop and execute the script.

Use remote-exec

NO.54 In a Linux environment, what is the default locations of the configuration file that Oracle Cloud Infrashtructure CLI uses for profile information/

/etc/.oci/config

/usr/local/bin/config

SHOME/.oci/config

/usr/bin/oci/config

NO.55 In a Linux environment, what is the default location of the configuration file that Oracle Cloud Infrastructure CLI uses for profile information? (Choose the best answer.)

$HOME/.oci/con

/usr/local/bin/con

/usr/bin/oci/con

/etc/.oci/con

NO.56 Given a service deployed on Oracle Cloud Infrastructure Container Engine far Kubernetes (OKE), which annotation should you add in the sample manifest file below to specify a 400 Mbps load balancer?

service.beta.kubernetes.io/oci-load-balancer-value: 400Mbps

service.beta.kubernetes.io/oci-load-balancer-size: 400Mbps

service.beta.kubernetes.io/oci-load-balancer-shape: 400Mbps

service, beta, kubernetes . io/oci-load-balancer-kind: 400Mbps

NO.57 You have two microservices, A and B running in production. Service A relies on APIs from service B.
You want to test changes to service A without deploying all of its dependencies, which includes service B.
Which approach should you take to test service A?

Test against production APIs.

Test using API mocks.

There is no need to explicitly test APIs.

Test the APIs in private environments.

NO.58 You are tasked with developing an application that requires the use of Oracle Cloud Infrastructure (OCI) APIs to POST messages to a stream in the OCI Streaming service.
Which statement is incorrect?

The request must include an authorization signing string including (but not limited to) x-content-sha256, content-type, and content-length headers.

The Content-Type header must be Set to application/j son

An HTTP 401 will be returned if the client’s clock is skewed more than 5 minutes from the server’s.

The request does not require an Authorization header.

NO.59 Which statements is incorrect with regards to the Oracle Cloud Infrastructure (OCI) Notifications service?

Notification topics may be assigned as the action performed by an OCI Events configuration.

OCI Alarms can be configured to publish to a notification topic when triggered.

An OCI function may subscribe to a notification topic.

A subscription can forward notifications to an HTTPS endpoint.

A subscription can integrate with PagerDuty events.

It may be used to receive an email each time an OCI Autonomous Database backup is completed.

NO.60 A programmer Is developing a Node is application which will run in a Linux server on their on-premises data center. This application will access various Oracle Cloud Infrastructure (OC1) services using OCI SDKs.
What is the secure way to access OCI services with OCI Identity and Access Management (JAM)?

Create a new OCI IAM user associated with a dynamic group and a policy that grants the desired permissions to OCI services. Add the on-premises Linux server in the dynamic group.

Create an OCI IAM policy with the appropriate permissions to access the required OCI services and assign the policy to the on-premises Linux server.

Create a new OCI IAM user, add the user to a group associated with a policy that grants the desired permissions to OCI services. In the on-premises Linux server, generate the keypair used for signing API requests and upload the public key to the IAM user.

Create a new OCI IAM user, add the user to a group associated with a policy that grants the desired permissions to OCI services. In the on-premises Linux server, add the user name and password to a file used by Node.js authentication.

NO.61 A pod security policy (PSP) is implemented in your Oracle Cloud Infrastructure Container Engine for Kubernetes cluster Which rule can you use to prevent a container from running as root using PSP?

NoPrivilege

RunOnlyAsUser

MustRunAsNonRoot

forbiddenRoot

NO.62 Per CAP theorem, in which scenario do you NOT need to make any trade-off between the guarantees?

when there are no network partitions

when the system is running in the cloud

when the system is running on-premise

when you are using load balancers

NO.63 What is the difference between blue/green and canary deployment strategies?

In blue/green, application Is deployed In minor increments to a select group of people. In canary, both old and new applications are simultaneously in production.

In blue/green, both old and new applications are in production at the same time. In canary, application is deployed Incrementally to a select group of people.

In blue/green, current applications are slowly replaced with new ones. In < MW y, Application ll deployed incrementally to a select group of people.

In blue/green, current applications are slowly replaced with new ones. In canary, both old and new applications are In production at the same time.

NO.64 You are developing a distributed application and you need a call to a path to always return a specific JSON content deploy an Oracle Cloud Infrastructure API Gateway with the below API deployment specification.

What is the correct value for type?

STOCK_RESPONSE_BACKEND

CONSTANT_BACKEND

JSON_BACKEND

HTTP_BACKEND

Oracle 1z0-1084-22 Real 2022 Braindumps Mock Exam Dumps: https://www.prepawayexam.com/Oracle/braindumps.1z0-1084-22.ete.file.html

Prepaway Exam Dumps

Tag: 1z0-1084-22 certified questions

1z0-1084-22 Free Exam Questions & Answers PDF Updated on Dec-2022 [Q41-Q64]

Oracle 1z0-1084-22 Exam Syllabus Topics:

Tag Archives: 1z0-1084-22 certified questions

Oracle 1z0-1084-22 Exam Syllabus Topics: