1z0-1084-20 practice test

1. Question 1 · 1

   You are working on a serverless DevSecOps application using Oracle Functions. You have deployed a Python function that uses the Oracle Cloud Infrastructure (OCI) Python SDK to stop any OCI Compute instance that does not comply with your corporate security standards. There are 3 non-compliant OCI Compute instances. However, when you invoke this function none of the instances were stopped. How should you troubleshoot this? (Choose the best answer.)

   Choose one answer.

   • There is no way to troubleshoot a function running on Oracle Functions.
   • Enable function logging in the OCI console, include some print statements in your function code and use logs to troubleshoot this.
   • Enable function remote debugging in the OCI console, and use your favorite IDE to inspect the function running on Oracle Functions.
   • Enable function tracing in the OCI console, and go to OCI Monitoring console to see the function stack trace.

2. Question 2 · 1

   You are processing millions of files in an Oracle Cloud Infrastructure (OCI) Object Storage bucket. Each time a new file is created, you want to send an email to the customer and create an order in a database. The solution should perform and minimize cost. Which action should you use to trigger this email? (Choose the best answer.)

   Choose one answer.

   • Schedule a cron job that monitors the OCI Object Storage bucket and emails the customer when a new file is created.
   • Use OCI Events service and OCI Notification service to send an email each time a file is created.
   • Schedule an Oracle Function that checks the OCI Object Storage bucket every minute and emails the customer when a file is found.
   • Schedule an Oracle Function that checks the OCI Object Storage bucket every second and emails the customer when a file is found.

3. Question 3 · 1

   You are using Oracle Cloud Infrastructure (OCI) Resource Manager to manage your infrastructure lifecycle and wish to receive an email each time a Terraform action begins. How should you use the OCI Events service to do this without writing any code? (Choose the best answer.)

   Choose one answer.

   • Create an OCI Notifications topic and email subscription with the destination email address. Then create an OCI Events rule matching "Resource Manager Stack "" Update" condition, and select the notification topic for the corresponding action.
   • Create an OCI Notifications topic and email subscription with the destination email address. Then create an OCI Events rule matching "Resource Manager Job "" Create" condition, and select the notification topic for the corresponding action.
   • Create a rule in OCI Events service matching the "Resource Manager Stack "" Update" condition. Then, select "Action Type: Email" and provide the destination email address.
   • Create an OCI Email Delivery configuration with the destination email address. Then create an OCI Events rule matching "Resource Manager Job "" Create" condition, and select the email configuration for the corresponding action.

4. Question 4 · 1

   You are developing a serverless application with Oracle Functions and Oracle Cloud Infrastructure Object Storage. Your function needs to read a JSON file object from an Object Storage bucket named "input-bucket" in compartment "qa-compartment". Your corporate security standards mandate the use of Resource Principals for this use case. Which two statements are needed to implement this use case? (Choose two.)

   Choose all answers that apply.

   • Set up a policy with the following statement to grant read access to the bucket: allow dynamic-group read-file-dg to read objects in compartment qa-compartment where target.bucket.name= "˜input-bucket'
   • Set up the following dynamic group for your function's OCID: Name: read-file-dg Rule: resource.id = "˜ocid1.fnfunc.oc1.phx.aaaaaaaakeaobctakezjz5i4ujj7g25q7sx5mvr55pms6f4da'
   • Set up a policy to grant all functions read access to the bucket: allow all functions in compartment qa-compartment to read objects in target.bucket.name= "˜input-bucket'
   • Set up a policy to grant your user account read access to the bucket: allow user XYZ to read objects in compartment qa-compartment where target.bucket.name= "˜input-bucket'
   • No policies are needed. By default, every function has read access to Object Storage buckets in the tenancy.

5. Question 5 · 1

   Per CAP theorem, in which scenario do you NOT need to make any trade-off between the guarantees? (Choose the best answer.)

   Choose one answer.

   • when the are no network partitions
   • when the system is running in the cloud
   • when the system is running on-premise
   • when you are using load balancers

6. Question 6 · 1

   How can you find details of the tolerations field for the sample YAML file below? (Choose the best answer.)

   Choose one answer.

   

   • kubectl list pod.spec.tolerations
   • kubectl explain pod.spec.tolerations
   • kubectl describe pod.spec.tolerations
   • kubectl get pod.spec.tolerations

7. Question 7 · 1

   You are building a container image and pushing it to the Oracle Cloud Infrastructure Registry (OCIR). You need to make sure that these images never get deleted from the repository. Which action should you take? (Choose the best answer.)

   Choose one answer.

   • Create a group and assign a policy to perform lifecycle operations on images.
   • Set global policy of image retention to "Retain All Images".
   • In your compartment, write a policy to limit access to the specific repository.
   • Edit the tenancy global retention policy.

8. Question 8 · 1

   A developer using Oracle Cloud Infrastructure (OCI) API Gateway must authenticate the API requests to their web application. The authentication process must be implemented using a custom scheme which accepts string parameters from the API caller. Which method can the developer use in this scenario? (Choose the best answer.)

   Choose one answer.

   • Create an authorizer function using request header authorization.
   • Create an authorizer function using token-based authorization.
   • Create a cross account functions authorizer.
   • Create an authorizer function using OCI Identity and Access Management based authentication.

9. Question 9 · 1

   You have been asked to create a stateful application deployed in Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) that requires all of your worker nodes to mount and write data to persistent volumes. Which two OCI storage services should you use? (Choose two.)

   Choose all answers that apply.

   • Use OCI File Services as persistent volume.
   • Use GlusterFS as persistent volume.
   • Use OCI Block Volume backed persistent volume.
   • Use open source storage solutions on top of OCI.
   • Use OCI Object Storage as persistent volume.

10. Question 10 · 1

    You have written a Node.js function and deployed it to Oracle Functions. Next, you need to call this function from a microservice written in Java deployed on Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE). Which can help you to achieve this? (Choose the best answer.)

    Choose one answer.

    • Use the OCI CLI with kubectl to invoke the function from the microservice.
    • Oracle Functions does not allow a microservice deployed on OKE to invoke a function.
    • OKE does not allow a microservice to invoke a function from Oracle Functions.
    • Use the OCI Java SDK to invoke the function from the microservice.

11. Question 11 · 1

    You have created a repository in Oracle Cloud Infrastructure Registry in the us-ashburn-1 (iad) region in your tenancy with a namespace called "heyoci". Which three are valid tags for an image named "myapp"? (Choose three.)

    Choose all answers that apply.

    • iad.ocir.io/heyoci/myproject/myapp:0.0.1
    • us-ashburn-1.ocir.io/heyoci/myapp:0.0.2-beta
    • us-ashburn-1.ocir.io/heyoci/myproject/myapp:0.0.2-beta
    • us-ashburn-1.ocir.io/myproject/heyoci/myapp:latest
    • iad.ocir.io/myproject/heyoci/myapp:latest
    • iad.ocir.io/heyoci/myapp:0.0.2-beta
    • iad.ocir.io/heyoci/myapp:latest

12. Question 12 · 1

    You are developing a serverless application with Oracle Functions. Your function needs to store state in a database. Your corporate security standards mandate encryption of secret information like database passwords. As a function developer, which approach should you follow to satisfy this security requirement? (Choose the best answer.)

    Choose one answer.

    • Use the Oracle Infrastructure Console and enter the password in the function configuration section in the provided input field.
    • Use Oracle Cloud Infrastructure Key Management to auto-encrypt the password. It will inject the auto-decrypted password inside your function container.
    • Encrypt the password using Oracle Cloud Infrastructure Key Management. Decrypt this password in your function code with the generated key.
    • All function configuration variables are automatically encrypted by Oracle Functions.

13. Question 13 · 1

    You are working on a cloud native e-commerce application on Oracle Cloud Infrastructure (OCI). Your application architecture has multiple OCI services, including Oracle Functions. You need to trigger these functions directly from other OCI services, without having to run custom code. Which OCI service cannot trigger your functions directly? (Choose the best answer.)

    Choose one answer.

    • OCI Events Service
    • OCI Registry
    • OCI API Gateway
    • Oracle Integration

14. Question 14 · 1

    Which two statements are true for serverless computing and serverless architectures? (Choose two.)

    Choose all answers that apply.

    • Long running tasks are perfectly suited for serverless
    • Serverless function state should never be stored externally
    • Application DevOps team is responsible for scaling
    • Serverless function execution is fully managed by a third party
    • Applications running on a FaaS (Functions as a Service) platform

15. Question 15 · 1

    Which testing approaches is a must for achieving high velocity of deployments and releases of cloud-native applications? (Choose the best answer.)

    Choose one answer.

    • Integration testing
    • A/B testing
    • Automated testing
    • Penetration testing

Paid access to all 21 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.