[2022年7月13日】Oracle 1Z0-1084-21試験の切り札は、良いマーク【Q45-Q65】を得るために不可欠である。

この記事を評価する

[Jul 13, 2022] Oracle 1Z0-1084-21 Exam Dumps Are Essential To Get Good Marks

Latest Oracle 1Z0-1084-21 Dumps with Test Engine and PDF (New Questions)

Oracle 1Z0-1084-21 Exam Syllabus Topics:

トピック	詳細
トピック 1	Developing Cloud Native Applications Manage multiple environments (dev, test stage, prod)
トピック 2	Explain the Challenges of testing in Cloud Native world Describe Service Communication Patterns
トピック3	Explain Microservices vs. Containers vs. Functions Use OCI APIs, SDKs and CLIupgrade
トピック4	Securing Cloud Native Applications Use the Defense-in-depth approach
トピック5	Develop Serverless Application with Oracle Functions Develop Microservices and Applications for OKE
トピック 6	Overcome Security challenges with Cloud Native Discuss the Meaning of Serverless Computing
トピック7	Build, Deploy and Release Applications Testing Cloud Native Applications
トピック8	Configure and Use Secret Management Operating Cloud Native Applications Cloud Native Fundamentals

質問45
Which one of the statements describes a service aggregator pattern?

It isimplemented in each service separately and uses a streaming service

It involves implementing a separate service that makes multiple calls to other backend services

It uses a queue on both sides of the service communication

It involves sending events through a message broker

質問46
A service you are deploying to Oracle infrastructure (OCI) Container En9ine for Kubernetes (OKE) uses a docker image from a private repository Which configuration is necessary to provide access to this repository from OKE?

Add a generic secret on the cluster containing your identity credentials. Then specify a registrycredentials property in the deployment manifest.

Create a docker-registry secret for OCIR with API key credentials on the cluster, and specify the imagepullsecret property in the applicationdeployment manifest.

Create a docker-registry secret for OCIR with identity Auth Token on the cluster, and specify the image pull secret property in the application deployment manifest.

Create a dynamic group for nodes in the cluster, and a policy that allows the dynamic group to read repositories in the same compartment.

説明
Pulling Images from Registry during Deployment
During the deployment of an application to a Kubernetes cluster, you’ll typically want one or more images to be pulled from a Docker registry. In the application’s manifest file you specify the images to pull, the registry to pull them from, and the credentials to use when pulling the images. The manifest file is commonly also referred to as a pod spec, or as a deployment.yaml file (although other filenames are allowed).
If you want the application to pull images that reside in Oracle Cloud Infrastructure Registry, you have to perform two steps:
– You have to use kubectl to create a Docker registry secret. The secret containsthe Oracle Cloud Infrastructure credentials to use when pulling the image. When creating secrets, Oracle strongly recommends you use the latest version of kubectl To create a Docker registry secret:
1- If you haven’t already done so, follow the steps to set up the cluster’s kubeconfig configuration file and (if necessary) set the KUBECONFIG environment variable to point to the file. Note that you must set up your own kubeconfig file. You cannot access a cluster using a kubeconfig file that a different userset up.
2- In a terminal window, enter:
$ kubectl create secret docker-registry <secret-name> –docker-server=<region-key>.ocir.io
–docker-username='<tenancy-namespace>/<oci-username>’ –docker-password='<oci-auth-token>’
–docker-email='<email-address>’
where:
<secret-name> is a name of your choice, that you will use in the manifest file to refer to the secret . For example, ocirsecret
<region-key> is the key for the Oracle Cloud Infrastructure Registry region you’re using. For example, iad.
See Availability by Region.
ocir.io is the Oracle Cloud Infrastructure Registry name.
<tenancy-namespace> is the auto-generated Object Storage namespace string of the tenancy containing the repository from which the application is to pull the image (as shown on the Tenancy Information page). For example, the namespace of the acme-dev tenancy might be ansh81vru1zp. Note that for some older tenancies, thenamespace string might be the same as the tenancy name in all lower-case letters (for example, acme-dev).
<oci-username> is the username to use when pulling the image. The username must have access to the tenancy specified by <tenancy-name>. For example, jdoe@acme.com . If your tenancy is federated with Oracle Identity Cloud Service, use the format oracleidentitycloudservice/<username>
<oci-auth-token> is the auth token of the user specified by <oci-username>. For example, k]j64r{1sJSSF-;)K8
<email-address> is an email address. An email address is required, but it doesn’t matter what you specify. For example, jdoe@acme.com
– You have to specify the image to pull from Oracle Cloud Infrastructure Registry, including the repository location and the Dockerregistry secret to use, in the application’s manifest file.
参考文献
https://docs.cloud.oracle.com/en-us/iaas/Content/Registry/Tasks/registrypullingimagesfromocir.htm

質問47
Which two statements are true for serverless computing and serverless architectures?

Long running tasks are perfectly suited for serverless

Serverless function state should never be stored externally

Application DevOps team is responsible for scaling

Serverless function execution is fully managed by a third party

Applications running on a FaaS (Functions as a Service) platform

質問48
In a Linux environment, what is the default location of the configuration file that Oracle Cloud Infrastructure CLI uses for profile information? (Choose the best answer.)

$HOME/.oci/con

/usr/local/bin/con

/usr/bin/oci/con

/etc/.oci/con

質問49
As a cloud-native developer, you are designing an application that depends on Oracle Cloud Infrastructure (OCI) Object Storage wherever the application is running. Therefore, provisioning of storage buckets should be part of your Kubernetes deployment process for the application. Which should you leverage to meet this requirement?

OCI Service Broker for Kubernetes

OCI ContainerEngine for Kubernetes

Open Service Broker API

Oracle Functions

質問50
Which Oracle Cloud Infrastructure (OCI) load balancer shape is used by default in OCI container Engineer for Kubernetes?

400 Mbps

8000 Mbps

There is no default. The shape has to be specified.

100 Mbps

質問51
You have a containerized app that requires an Autonomous Transaction Processing (ATP) Database. Which option is not valid for o from a container in Kubernetes?

EnableOracle REST Data Services for the required schemas and connect via HTTPS.

Create a Kubernetes secret with contents from the instance Wallet files. Use this secret to create a volume mounted to the appropriate path in the application deployment manifest.

Use Kubernetes secrets to configure environment variables on the container with ATP instance OCID, and OCI API credentials. Then use the CreateConnection API endpoint from the service runtime.

Install the Oracle Cloud Infrastructure Service Broker on the Kubernetes cluster and deploy serviceinstance and serviceBinding resources for ATP. Then use the specified binding name as a volume in the application deployment manifest.

説明
The Kubernetes documentation lays out the following use case for the Service Catalog API:
An application developer wants to use message queuing as part of their application running in a Kubernetes cluster. However, they do not want todeal with the overhead of setting such a service up and administering it themselves. Fortunately, there is a cloud provider that offers message queuing as a managed service through its service broker.
A cluster operator can setup Service Catalog and use itto communicate with the cloud provider’s service broker to provision an instance of the message queuing service and make it available to the application within the Kubernetes cluster. The application developer therefore does not need to be concerned withthe implementation details or management of the message queue. The application can simply use it as a service.
The samples in theOCI Service Broker source code include a deployment YAML file that describes how to use an init container to take the values in the Autonomous Transaction Processing service binding and put them in environment variables or in a volume mount. After that, your application can use those values to connect to the database.
Once you’ve installed and registered the service broker, you’re ready to use the ATP service plan to provision an ATP instance. I’ll go into details below, but the overview of the process looks like so:
-Create a Kubernetes secret with a new admin and wallet password (in JSON format)
– Create a YAML configuration for the ATP Service Instance
– Deploy the Service Instance
– Create a YAML config for the ATP Service Binding
– Deploy the Service Binding to obtain which results in the creation of a new Kubernetes secret containing the wallet contents
– Create a Kubernetes secret for Microservice deployment use containing the admin password and the wallet password (in plain text format)
– Create a YAML config for the Microservice deployment which uses an initContainer to decode the wallet secrets (due to a bug which double encodes them) and mounts the wallet contents as a volume References:
https://blogs.oracle.com/developers/creating-an-atp-instance-with-the-oci-service-broker
https://blogs.oracle.com/cloud-infrastructure/integrating-oci-service-broker-with-autonomous-transaction-proces

質問52
You have written a Node.js function and deployed it to Oracle Functions. Next, you need to call this function from a microservicewritten in Java deployed on Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE).
Which can help you to achieve this?

Use the OCI CLI with kubect1 to invoke the function from the microservice.

Oracle Functions does not allow a microservice deployed on OKE to invoke a function.

OKE does not allow a microservice to invoke a function from Oracle Functions.

Use the OCI Java SDK to invoke the function from the microservice.

質問53
You have created a repository in Oracle Cloud Infrastructure Registry in the us-ashburn-1 (iad) region in your tenancy with a namespace called “heyci.
Which three are valid tags for an image named “myapp”?

iad.ocir.io/heyoci/myproject/myapp:0.0.1

us-ashburn-l.ocirJo/heyoci/myapp:0.0.2-beta

us-ashburn-l.ocir.io/heyoci/myproject/myapp:0.0.2-beta

us-ashburn-l.ocir.io/myproject/heyoci/myapp:latest

iad.ocir.io/myproject/heyoci/myapprlatest

iad.ocir.io/heyoci/myapp:0.0.2-beta

iad.ocir.io/heyoci/myapp:latest

説明
Give a tag to the image that you’re going to push to Oracle Cloud Infrastructure Registry by entering:
docker tag <image-identifier> <target-tag>
where:
<image-identifier> uniquely identifies the image, either using the image’s id (for example, 8e0506e14874), or the image’s name and tag separated by a colon (for example, acme-web-app:latest).
<target-tag> is in the
format <region-key>.ocir.io/<tenancy-namespace>/<repo-name>/<image-name>:<tag> where:
<region-key> is the key for the Oracle Cloud Infrastructure Registry region you’re using. For example, iad.
See Availability by Region.
ocir.io is the Oracle Cloud Infrastructure Registry name.
<tenancy-namespace> is the auto-generated Object Storage namespace string of the tenancy that owns the repository to which you want to push the image (as shown on the Tenancy Information page). For example, the namespace of the acme-dev tenancy might be ansh81vru1zp. Note that for some older tenancies, the namespace string might be the same as the tenancy name in all lower-case letters (for example, acme-dev).
Note also that your user must have access to the tenancy.
<repo-name> (if specified) is the name of a repository to which you want to push the image (for example, project01). Note that specifying a repository is optional (see About Repositories).
<image-name> is the name you want to give the image in Oracle Cloud Infrastructure Registry (for example, acme-web-app).
<tag> is an image tag you want to give the image in Oracle Cloud Infrastructure Registry (for example, version2.0.test).
For example, for convenience you might want to group together multiple versions of the acme-web-app image in the acme-dev tenancy in the Ashburn region into a repository called project01. You do this by including the name of the repository in the image name when you push the image, in the format <region-key>.ocir.io/<tenancy-namespace>/<repo-name>/<image-name>:<tag>. For example, iad.ocir.io/ansh81vru1zp/project01/acme-web-app:4.6.3. Subsequently, when you use the docker push command, the presence of the repository in the image’s name ensures the image is pushed to the intended repository.
If you push an image and include the nameof a repository that doesn’t already exist, a new private repository is created automatically. For example, if you enter a command like docker push iad.ocir.io/ansh81vru1zp/project02/acme-web-app:7.5.2 and the project02 repository doesn’t exist, a privaterepository called project02 is created automatically.
If you push an image and don’t include a repository name, the image’s name is used as the name of the repository. For example, if you enter a command like docker pushiad.ocir.io/ansh81vru1zp/acme-web-app:7.5.2 that doesn’t contain a repository name, the image’s name (acme-web-app) is used as the name of a private repository.
https://docs.cloud.oracle.com/en-us/iaas/Content/Registry/Concepts/registrywhatisarepository.htm

質問54
Which two statements are true for service choreography?

Service choreographer is responsible for invoking other services.

Services involved in choreography communicate through messages/messaging systems.

Service choreography relies on a central coordinator.

Service choreography should not useevents for communication.

Decision logic in service choreography is distributed.

質問55
You have two microservices, A and B running in production. Service A relies on APIs fromservice B.
You want to test changes to service A without deploying all of its dependencies, which includes service B.
Which approach should you take to test service A?

Test against production APIs.

Test using API mocks.

There is no need to explicitly test APIs.

Test the APIs in private environments.

質問56
Which is NOT a valid option to execute a function deployed on Oracle Functions?

Send a signed HTTP requests to the function’s invoke endpoint

Invoke from Oracle Cloud Infrastructure CLI

Invoke from Docker CLI

Trigger by an event in Oracle Cloud Infrastructure Events service

Invoke from Fn Project CLI

質問57
You are developing a serverless application with Oracle Functions and Oracle Cloud Infrastructure Object Storage- Your function needs to read a JSON file object from an Object Storage bucket named”input-bucket” in compartment “qa-compartment”. Your corporate security standards mandate the use of Resource Principals for this use case.
Which two statements are needed to implement this use case?

Set up a policy with the following statement to grant read access to the bucket:
allow dynamic-group read-file-dg to read objects in compartment qa-compartment where target .bucket
.name=’ input-bucket *

Set up the following dynamic group for your function’s OCID: Name: read-file-dg Rule: resource. id = ‘ ocid1. f nf unc. ocl -phx. aaaaaaaakeaobctakezj z5i4uj j 7g25q7sx5mvr55pms6f
4da !

Set up a policy to grant all functions read access to the bucket:
allow all functions in compartment qa-compartment to read objects in target.bucket.name=’input-bucket’

Set up a policy to grant your user account read access to the bucket:
allow user XYZ to read objects in compartment qa-compartment where target .bucket, name-‘input-bucket’

No policies are needed. By default, every function has read access to Object Storage buckets in the tenancy

質問58
You want to push a new image in the Oracle Cloud Infrastructure (OCI) Registry. Which two actions do you need to perform?

Assign a tag via Docker CLI to the image.

Generate an auth token to complete the authentication via Docker CLI.

Generate an API signing key to complete the authentication via Docker CLI.

Assign an OCI defined tag via OCI CLI to the image.

Generate an OCI tag namespace in your repository.

質問59
You are working on a serverless DevSecOps application using Oracle Functions. You have deployeda Python function that uses the Oracle Cloud Infrastructure (OCI) Python SDK to stop any OC1 Compute instance that does not comply with your corporate security standards There are 3 non compliant OCI Compute instances.
However, when you invoke this function none of the instances were stopped. How should you troubleshoot this?

There is no way to troubleshoot a function running on Oracle Functions.

Enable function logging in the OCI console, include some print statements in your function code and use logs to troubleshoot this.

Enable function remote debugging in the OCI console, and use your favorite IDE to inspect the function running on Oracle Functions.

Enable function tracing in the OCI console, and go to OCI Monitoring console to see the function stack trace.

質問60
You are developing a polyglot serverless application using Oracle Functions. Which language cannot be used to write your function code?

PL/SQL

パイソン

Node.js

ジャワ

質問61
In the sample Kubernetesmanifest file below, what annotations should you add to create a private load balancer In oracle Cloud infrastructure Container Engine for Kubermetes?

A)

B)

C)

D)

オプションA

オプションB

オプションC

オプションD

質問62
What are two of the main reasons you would choose to implement a serverless architecture?

No need for integration testing

Reduced operational cost

Improved In-function state management

Automatic horizontal scaling

Easier to run long-running operations

質問63
Your organization uses a federated identity provider to login to your Oracle Cloud Infrastructure (OCI) environment. As a developer, you are writing a script to automate some operation and want to use OCI CLI to do that. Your security team doesn’t allow storing private keys on local machines.
How can you authenticate with OCI CLI?

Run oci setup keys and provide your credentials

Run oci session refresh -profile <profile_name>

Run oci session authenticate and provide your credentials

Run oci setup oci-cli-rc -file path/to/target/file

質問64
Which one of the following is NOT a valid backend-type supported by Oracle Cloud Infrastructure (OCI) API Gateway?

STOCK_RESPONSE_BACKEND

ORACLE_FUNCTIONS_BACKEND

ORACLE_STREAMS_BACKEND

HTTP_BACKEND

質問65
Which statement accurately describes Oracle Cloud Infrastructure (OCI) Load Balancer integration with OCI Container Engine for Kubernetes (OKE)?

OKE service provisions an OCI Load Balancer instance for each Kubernetes service with LoadBalancer type in the YAML configuration.

OCI Load Balancer instance provisioning is triggered by OCI Events service for each Kubernetes service with LoadBalancer type in the YAML configuration.

OCI Load Balancer instance must be manually provisioned for each Kubernetesservice that requires traffic balancing.

OKE service provisions a single OCI Load Balancer instance shared with all the Kubernetes services with LoadBalancer type in the YAML configuration.