Latest 1Z0-1084-21 Pass Guaranteed Exam Dumps with Accurate & Updated Questions [Q38-Q59]

NEW QUESTION 38
Which one of the statements describes a service aggregator pattern?

It isimplemented in each service separately and uses a streaming service

It involves implementing a separate service that makes multiple calls to other backend services

It uses a queue on both sides of the service communication

It involves sending events through a message broker

NEW QUESTION 39
A service you are deploying to Oracle infrastructure (OCI) Container En9ine for Kubernetes (OKE) uses a docker image from a private repository Which configuration is necessary to provide access to this repository from OKE?

Add a generic secret on the cluster containing your identity credentials. Then specify a registrycredentials property in the deployment manifest.

Create a docker-registry secret for OCIR with API key credentials on the cluster, and specify the imagepullsecret property in the applicationdeployment manifest.

Create a docker-registry secret for OCIR with identity Auth Token on the cluster, and specify the image pull secret property in the application deployment manifest.

Create a dynamic group for nodes in the cluster, and a policy that allows the dynamic group to read repositories in the same compartment.

Explanation
Pulling Images from Registry during Deployment
During the deployment of an application to a Kubernetes cluster, you’ll typically want one or more images to be pulled from a Docker registry. In the application’s manifest file you specify the images to pull, the registry to pull them from, and the credentials to use when pulling the images. The manifest file is commonly also referred to as a pod spec, or as a deployment.yaml file (although other filenames are allowed).
If you want the application to pull images that reside in Oracle Cloud Infrastructure Registry, you have to perform two steps:
– You have to use kubectl to create a Docker registry secret. The secret containsthe Oracle Cloud Infrastructure credentials to use when pulling the image. When creating secrets, Oracle strongly recommends you use the latest version of kubectl To create a Docker registry secret:
1- If you haven’t already done so, follow the steps to set up the cluster’s kubeconfig configuration file and (if necessary) set the KUBECONFIG environment variable to point to the file. Note that you must set up your own kubeconfig file. You cannot access a cluster using a kubeconfig file that a different userset up.
2- In a terminal window, enter:
$ kubectl create secret docker-registry <secret-name> –docker-server=<region-key>.ocir.io
–docker-username='<tenancy-namespace>/<oci-username>’ –docker-password='<oci-auth-token>’
–docker-email='<email-address>’
where:
<secret-name> is a name of your choice, that you will use in the manifest file to refer to the secret . For example, ocirsecret
<region-key> is the key for the Oracle Cloud Infrastructure Registry region you’re using. For example, iad.
See Availability by Region.
ocir.io is the Oracle Cloud Infrastructure Registry name.
<tenancy-namespace> is the auto-generated Object Storage namespace string of the tenancy containing the repository from which the application is to pull the image (as shown on the Tenancy Information page). For example, the namespace of the acme-dev tenancy might be ansh81vru1zp. Note that for some older tenancies, thenamespace string might be the same as the tenancy name in all lower-case letters (for example, acme-dev).
<oci-username> is the username to use when pulling the image. The username must have access to the tenancy specified by <tenancy-name>. For example, [email protected] . If your tenancy is federated with Oracle Identity Cloud Service, use the format oracleidentitycloudservice/<username>
<oci-auth-token> is the auth token of the user specified by <oci-username>. For example, k]j64r{1sJSSF-;)K8
<email-address> is an email address. An email address is required, but it doesn’t matter what you specify. For example, [email protected]
– You have to specify the image to pull from Oracle Cloud Infrastructure Registry, including the repository location and the Dockerregistry secret to use, in the application’s manifest file.
References:
https://docs.cloud.oracle.com/en-us/iaas/Content/Registry/Tasks/registrypullingimagesfromocir.htm

NEW QUESTION 40
A leading insurancefirm is hosting its customer portal in Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes with an OCI Autonomous Database. Their support team discovered a lot of SQL injection attempts and cross-site scripting attacks to the portal, which isstarting to affect the production environment.
What should they implement to mitigate this attack?

Network Security Lists

Network Security Groups

Network Security Firewall

Web Application Firewall

NEW QUESTION 41
You created a pod called “nginx” and its state is set to Pending.
Which command can you run to see the reason why the “nginx” pod is in the pending state?

kubect2 logs pod nginx

kubect2 describe pod nginx

kubect2 get pod nginx

Through the Oracle Cloud Infrastructure Console

NEW QUESTION 42
You want to push a new image in the Oracle Cloud Infrastructure (OCI) Registry. Which two actions do you need to perform?

Assign a tag via Docker CLI to the image.

Generate an auth token to complete the authentication via Docker CLI.

Generate an API signing key to complete the authentication via Docker CLI.

Assign an OCI defined tag via OCI CLI to the image.

Generate an OCI tag namespace in your repository.

NEW QUESTION 43
Which is NOT a supported SDK on Oracle Cloud Infrastructure (OCI)?

Ruby SDK

Java SDK

Python SDK

Go SDK

.NET SDK

NEW QUESTION 44
In a Linux environment, what is the default location of the configuration file that Oracle Cloud Infrastructure CLI uses for profile information? (Choose the best answer.)

$HOME/.oci/con

/usr/local/bin/con

/usr/bin/oci/con

/etc/.oci/con

NEW QUESTION 45
Which two are characteristics of microservices?

Microservices are hard to test in isolation.

Microservicescan be independently deployed.

All microservices share a data store.

Microservices can be implemented in limited number of programming languages.

Microservices communicate over lightweight APIs.

NEW QUESTION 46
What is one of the differences between a microservice and a serverless function?

Microservices are used for long running operations and serverless functions for short running operations.

Microservices always use a data storeand serverless functions never use a data store.

Microservices are stateless and serverless functions are stateful.

Microservices are triggered by events and serverless functions are not.

NEW QUESTION 47
You are building a cloud native, serverless travel application with multiple Oracle Functions in Java, Python and Node.js. You need to build and deploy these functions to a single applications named travel-app.
Which command will help you complete this task successfully?

oci fn function deploy –ap travel-ap –all

fn -v deploy –ap travel-ap — all

oci fn application –application-name-ap deploy –all

fn function deploy –all –application-name travel-ap

NEW QUESTION 48
You are developing a serverless application with Oracle Functions. Your function needs to store state in a database. Your corporate security Standards mandate encryption of secret information like database passwords.
As a function developer, which approach should you follow to satisfy this security requirement?

Use Oracle Cloud Infrastructure Key Management to auto-encrypt the password. It will inject the auto-decrypted password inside your function container.

All function configuration variables are automatically encrypted by Oracle Functions.

Use the Oracle Cloud Infrastructure Console and enter the password in the function configuration section in the provided input field.

Encrypt the password using Oracle Cloud Infrastructure Key Management. Decrypt this password in your function code withthe generated key.

NEW QUESTION 49
What is thecommunication method between different Cloud native applications services?

Complex and asynchronous

Basic and synchronous

Complex and synchronous

Basic and asynchronous

Explanation
What Is Cloud Native?
Cloud native technologies arecharacterized by the use of containers, microservices, serverless functions, development pipelines, infrastructure expressed as code, event-driven applications, and Application Programming Interfaces (APIs). Cloud native enables faster software developmentand the ability to build applications that are resilient, manageable, observable, and dynamically scalable to global enterprise levels.
When constructing a cloud-native application, you’ll want to be sensitive to how back-end services communicate with each other. Ideally, the less inter-service communication, the better. However, avoidance isn’t always possible as back-end services often rely on one another to complete an operation.
While direct HTTP calls between microservices are relatively simple to implement, care should be taken to minimize this practice. To start, these calls are always synchronous and will block the operation until a result is returned or the request times outs. What were once self-contained, independent services, able to evolve independently and deploy frequently, now become coupled to each other. As coupling among microservices increase, their architectural benefits diminish.
Executing an infrequent request that makes a single direct HTTP call to another microservice might be acceptable for some systems. However, high-volume calls that invoke direct HTTP calls to multiple microservices aren’t advisable. They can increase latency and negatively impact the performance, scalability, and availability of your system. Even worse, a longseries of direct HTTP communication can lead to deep and complex chains of synchronous microservices calls, shown in Figure 4-9:

A message queue is an intermediary construct through which a producer and consumer pass a message.
Queues implement an asynchronous, point-to-point messaging pattern.
Events
Message queuing is an effective way to implement communication where a producer can asynchronously send a consumer a message.
References:
https://www.xenonstack.com/blog/cloud-native-architecture/
https://www.oracle.com/sa/cloud/cloud-native/
https://www.oracle.com/technetwork/topics/entarch/cloud-native-app-development-wp-3664668.pdf

NEW QUESTION 50
You are developing a serverless application with Oracle Functions. Your function needs to store state in a database. Your corporate security Standards mandate encryption of secret information like database passwords.
As a function developer, which approach should you follow to satisfy this security requirement?

Use the Oracle Cloud Infrastructure Console and enter the password in the function configuration section in the provided input field.

Use Oracle Cloud Infrastructure Key Management to auto-encrypt the password. It will inject the auto-decrypted password inside your function container.

Encrypt the password using Oracle Cloud Infrastructure Key Management. Decrypt this password in your function code withthe generated key.

All function configuration variables are automatically encrypted by Oracle Functions.

NEW QUESTION 51
What are two of the main reasons you would choose to implement a serverless architecture?

No need for integration testing

Reduced operational cost

Improved In-function state management

Automatic horizontal scaling

Easier to run long-running operations

NEW QUESTION 52
You are processing millions of files in an Oracle Cloud Infrastructure (OCI) Object Storage bucket. Each time a new file is created, you want to send an email to the customer and create an order in a database. The solution should perform and minimize cost, Which action should you use to trigger this email?

Schedule a cron job that monitors the OCI Object Storage bucket and emails the customerwhen a new file is created.

Use OCI Events service and OCI Notification service to send an email each time a file is created.

Schedule an Oracle Function that checks the OCI Object Storage bucket every minute and emails the customer when a file is found.

Schedule an Oracle Function that checks the OCI Object Storage bucket every second and emails the customer when a file is found.

NEW QUESTION 53
Which is NOT a supported SDk Oracle Cloud Infrastructure (OCI)?

Go SDK

Java SDK

NET SDK

Ruby SDK

Python SDK

NEW QUESTION 54
Which two statements are true for serverless computing and serverless architectures?

Long running tasks are perfectly suited for serverless

Serverless function state should never be stored externally

Application DevOps team is responsible for scaling

Serverless function execution is fully managed by a third party

Applications running on a FaaS (Functions as a Service) platform

NEW QUESTION 55
Given a service deployed on Oracle Cloud infrastructure Container Engine for Kubernetes (OKE), which annotation should you add in the sample manifest file to specify a 400 Mbps load balancer?

service.beta, kubernetes. lo/oci-load-balancer-kind: 400Mbps

service, beta, kubernetes. lo/oci-load-balancer-value: 4 00Mbps

service . beta. kubernetes . lo/oci-load-balancer-shape: 400Mbps

service . beta . kubernetes . lo/oci-load-balancer-size: 400Mbps

NEW QUESTION 56
You are implementing logging in your services that will be running in Oracle Cloud Infrastructure Container Engine for Kubernetes. Which statement describes the appropriate logging approach?

Each service logs to its own log file.

All services log to an external logging system.

All services log to standard output only.

All services log to a shared log file.

NEW QUESTION 57
You have a containerized app that requires an Autonomous Transaction Processing (ATP) Database. Which option is not valid for o from a container in Kubernetes?

EnableOracle REST Data Services for the required schemas and connect via HTTPS.

Create a Kubernetes secret with contents from the instance Wallet files. Use this secret to create a volume mounted to the appropriate path in the application deployment manifest.

Use Kubernetes secrets to configure environment variables on the container with ATP instance OCID, and OCI API credentials. Then use the CreateConnection API endpoint from the service runtime.

Install the Oracle Cloud Infrastructure Service Broker on the Kubernetes cluster and deploy serviceinstance and serviceBinding resources for ATP. Then use the specified binding name as a volume in the application deployment manifest.

Explanation
The Kubernetes documentation lays out the following use case for the Service Catalog API:
An application developer wants to use message queuing as part of their application running in a Kubernetes cluster. However, they do not want todeal with the overhead of setting such a service up and administering it themselves. Fortunately, there is a cloud provider that offers message queuing as a managed service through its service broker.
A cluster operator can setup Service Catalog and use itto communicate with the cloud provider’s service broker to provision an instance of the message queuing service and make it available to the application within the Kubernetes cluster. The application developer therefore does not need to be concerned withthe implementation details or management of the message queue. The application can simply use it as a service.
The samples in theOCI Service Broker source code include a deployment YAML file that describes how to use an init container to take the values in the Autonomous Transaction Processing service binding and put them in environment variables or in a volume mount. After that, your application can use those values to connect to the database.
Once you’ve installed and registered the service broker, you’re ready to use the ATP service plan to provision an ATP instance. I’ll go into details below, but the overview of the process looks like so:
-Create a Kubernetes secret with a new admin and wallet password (in JSON format)
– Create a YAML configuration for the ATP Service Instance
– Deploy the Service Instance
– Create a YAML config for the ATP Service Binding
– Deploy the Service Binding to obtain which results in the creation of a new Kubernetes secret containing the wallet contents
– Create a Kubernetes secret for Microservice deployment use containing the admin password and the wallet password (in plain text format)
– Create a YAML config for the Microservice deployment which uses an initContainer to decode the wallet secrets (due to a bug which double encodes them) and mounts the wallet contents as a volume References:
https://blogs.oracle.com/developers/creating-an-atp-instance-with-the-oci-service-broker
https://blogs.oracle.com/cloud-infrastructure/integrating-oci-service-broker-with-autonomous-transaction-proces

NEW QUESTION 58
Which pattern can help you minimize the probability of cascading failures in your system during partial loss of connectivity or a complete service failure?

Retry pattern

Anti-corruption layer pattern

Circuit breaker pattern

Compensating transaction pattern

NEW QUESTION 59
In order to effectively test your cloud-native applications, you might utilize separate environments (development, testing, staging, production, etc.). Which Oracle Cloud Infrastructure (OC1) service can you use to create and manage your infrastructure?

OCI Compute

OCI Container Engine for Kubernetes

OCI Resource Manager

OCI API Gateway