Oracle Cloud Infrastructure Developer Professional practice questions

1. Question 1 of 25

   You are tasked with developing an application that requires the use of Oracle Cloud Infrastructure (OCI) APIs to POST messages to a stream in the OCI Streaming service. Which statement is incorrect? (Choose the best answer.)

   • AThe request must include an authorization signing string including (but not limited to) x-content-sha256, content-type, and content-length headers.
   • BThe Content-Type header must be set to application/json
   • CAn HTTP 401 will be returned if the client's clock is skewed more than 5 minutes from the server's.
   • DThe request does not require an Authorization header.

   Show answer

   Correct answer: D

   How others answered

   • D100%

   Explanation

   Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/API/Concepts/signingrequests.htm

   Adapted from community discussion by mbanzai · 2020-07-27 · 6 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   View community discussion4

   Candidate context

   Question 1 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1084 or CertExamHQ.

   1. M

      mbanzai

      2020-07-27

      6 upvotes

      D For PUT and POST requests (when there's content in the request body), the signing string must include at least these headers: (request-target) host date or x-date (if both are included, Oracle uses x-date) x-content-sha256 (except for Object Storage PUT requests; see the next section) content-type content-length and the Authorization header.

   2. F

      firstvishal

      2020-08-02

      3 upvotes

      I think answer is D- I got practice exams from Udemy and in that answer is A, but when I read the article at oracle I found D must be the right answer:- Summary of Signing Steps In general, these are the steps required to sign a request: Form the HTTPS request (SSL protocol TLS 1.2 is required). Create the signing string, which is based on parts of the request. Create the signature from the signing string, using your private key and the RSA-SHA256 algorithm. Add the resulting signature and other required information to the Authorization header in the request. See the remaining sections in this topic for details about these steps.

   3. O

      Osong

      2020-08-15

      2 upvotes

      D To see why B and C are correct. See https://docs.cloud.oracle.com/en-us/iaas/Content/API/Concepts/usingapi.htm A is also correct, while if you are missing the header a 401 Unauthorized response will be sent to the client. See https://docs.cloud.oracle.com/en-us/iaas/Content/API/Concepts/signingrequests.htm You know an answer is from a bot if it cites no source nor argument

   4. G

      gfhbox0083

      2020-07-08

      3 upvotes

      D, for sure. The request 'does' require an Authorization header. More details via the provided link

2. Question 2 of 25

   You are working on a serverless DevSecOps application using Oracle Functions. You have deployed a Python function that uses the Oracle Cloud Infrastructure (OCI) Python SDK to stop any OCI Compute instance that does not comply with your corporate security standards. There are 3 non-compliant OCI Compute instances. However, when you invoke this function none of the instances were stopped. How should you troubleshoot this? (Choose the best answer.)

   • AThere is no way to troubleshoot a function running on Oracle Functions.
   • BEnable function logging in the OCI console, include some print statements in your function code and use logs to troubleshoot this.
   • CEnable function remote debugging in the OCI console, and use your favorite IDE to inspect the function running on Oracle Functions.
   • DEnable function tracing in the OCI console, and go to OCI Monitoring console to see the function stack trace.

   Show answer

   Correct answer: C

   Explanation

   Would go with B, for this time. Debugging would be in case of an error returned by the function. more info via https://docs.cloud.oracle.com/en-us/iaas/Content/Functions/Tasks/functionsexportingfunctionlogfiles.htm https://docs.cloud.oracle.com/en-us/iaas/Content/Functions/Tasks/functionstroubleshooting.htm

   Adapted from community discussion by gfhbox0083 · 2020-07-08 · 9 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   View community discussion2

   Candidate context

   Question 2 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1084 or CertExamHQ.

   1. G

      gfhbox0083

      2020-07-08

      9 upvotes

      Would go with B, for this time. Debugging would be in case of an error returned by the function. more info via https://docs.cloud.oracle.com/en-us/iaas/Content/Functions/Tasks/functionsexportingfunctionlogfiles.htm https://docs.cloud.oracle.com/en-us/iaas/Content/Functions/Tasks/functionstroubleshooting.htm

   2. A

      Adijobi

      2020-08-02

      1 upvote

      Gosh after doing research I have to say B actually looks correct. Fn's own troubleshooting docs seem to lean this way ---JANKY!!!---

3. Question 3 of 25

   You are developing a polyglot serverless application using Oracle Functions. Which language cannot be used to write your function code? (Choose the best answer.)

   • APL/SQL
   • BPython
   • CNode.js
   • DGo
   • EJava

   Show answer

   Correct answer: A

   How others answered

   • A100%

   Explanation

   Reference: https://static.rainfocus.com/oracle/oow19/sess/1550723907257001SAfg/PF/Serverless%20-%20A%20Game%20Changer%20in%20Cloud% 20Computing%20%281%29_1568730727062001IhkS.pdf (18)

   Adapted from community discussion by gfhbox0083 · 2020-07-08 · 5 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   View community discussion2

   Candidate context

   Question 3 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1084 or CertExamHQ.

   1. G

      gfhbox0083

      2020-07-08

      5 upvotes

      A, for sure. Oracle Functions is based on open source Fn Project which provides function development kits (FDKs) for Java (including GraalVM native image), Python, Node, Go and Ruby, and in addition, lets you bring your own Dockerfile.

   2. P

      ProbaMarci

      2023-08-30

      Selected A1 upvote

      A. PL/SQL is used for programming in database like writing triggers or stores procedures. Funcions have nothing to do with that, it executes on a virtual machine (in a container) and not in a database.

4. Question 4 of 25

   You are processing millions of files in an Oracle Cloud Infrastructure (OCI) Object Storage bucket. Each time a new file is created, you want to send an email to the customer and create an order in a database. The solution should perform and minimize cost. Which action should you use to trigger this email? (Choose the best answer.)

   • ASchedule a cron job that monitors the OCI Object Storage bucket and emails the customer when a new file is created.
   • BUse OCI Events service and OCI Notification service to send an email each time a file is created.
   • CSchedule an Oracle Function that checks the OCI Object Storage bucket every minute and emails the customer when a file is found.
   • DSchedule an Oracle Function that checks the OCI Object Storage bucket every second and emails the customer when a file is found.

   Show answer

   Correct answer: C

   Explanation

   Would go with B. Use Notifications to get notified when Event Rules are triggered or alarms are breached, or to directly publish a message. https://docs.cloud.oracle.com/en-us/iaas/Content/Notification/Concepts/notificationoverview.htm

   Adapted from community discussion by gfhbox0083 · 2020-07-08 · 11 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   View community discussion4

   Candidate context

   Question 4 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1084 or CertExamHQ.

   1. G

      gfhbox0083

      2020-07-08

      11 upvotes

      Would go with B. Use Notifications to get notified when Event Rules are triggered or alarms are breached, or to directly publish a message. https://docs.cloud.oracle.com/en-us/iaas/Content/Notification/Concepts/notificationoverview.htm

   2. T

      tohegajaf

      2021-09-30

      1 upvote

      with function you pay per execution time. doesn't make sense to run it in a cron

   3. S

      scab

      2020-10-15

      1 upvote

      To minimize cost, i think C is better than B. what do you think ?

   4. S

      scab

      2020-10-15

      1 upvote

      To minimize cost, i think B is beter than B. what do you think ?

5. Question 5 of 25

   You are using Oracle Cloud Infrastructure (OCI) Resource Manager to manage your infrastructure lifecycle and wish to receive an email each time a Terraform action begins. How should you use the OCI Events service to do this without writing any code? (Choose the best answer.)

   • ACreate an OCI Notifications topic and email subscription with the destination email address. Then create an OCI Events rule matching "Resource Manager Stack "" Update" condition, and select the notification topic for the corresponding action.
   • BCreate an OCI Notifications topic and email subscription with the destination email address. Then create an OCI Events rule matching "Resource Manager Job "" Create" condition, and select the notification topic for the corresponding action.
   • CCreate a rule in OCI Events service matching the "Resource Manager Stack "" Update" condition. Then, select "Action Type: Email" and provide the destination email address.
   • DCreate an OCI Email Delivery configuration with the destination email address. Then create an OCI Events rule matching "Resource Manager Job "" Create" condition, and select the email configuration for the corresponding action.

   Show answer

   Correct answer: D

   Explanation

   B You can only deliver events to certain Oracle Cloud Infrastructure services with a rule. Use the following services to create actions: Notifications Streaming Functions https://docs.cloud.oracle.com/en-us/iaas/Content/Events/Concepts/eventsoverview.htm

   Adapted from community discussion by mbanzai · 2020-07-27 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   View community discussion3

   Candidate context

   Question 5 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1084 or CertExamHQ.

   1. M

      mbanzai

      2020-07-27

      3 upvotes

      B You can only deliver events to certain Oracle Cloud Infrastructure services with a rule. Use the following services to create actions: Notifications Streaming Functions https://docs.cloud.oracle.com/en-us/iaas/Content/Events/Concepts/eventsoverview.htm

   2. B

      Balazs_Molnar

      2021-04-23

      1 upvote

      Probably B since there is no sign of email delivery service possibilities in https://docs.cloud.oracle.com/en-us/iaas/Content/Notification/Concepts/notificationoverview.htm

   3. A

      Adijobi

      2020-08-02

      1 upvote

      https://docs.cloud.oracle.com/en-us/iaas/Content/Notification/Concepts/notificationoverview.htm Yep B!!

6. Question 6 of 25

   Select 2

   You are developing a serverless application with Oracle Functions and Oracle Cloud Infrastructure Object Storage. Your function needs to read a JSON file object from an Object Storage bucket named "input-bucket" in compartment "qa-compartment". Your corporate security standards mandate the use of Resource Principals for this use case. Which two statements are needed to implement this use case? (Choose two.)

   • ASet up a policy with the following statement to grant read access to the bucket: allow dynamic-group read-file-dg to read objects in compartment qa-compartment where target.bucket.name= "˜input-bucket'
   • BSet up the following dynamic group for your function's OCID: Name: read-file-dg Rule: resource.id = "˜ocid1.fnfunc.oc1.phx.aaaaaaaakeaobctakezjz5i4ujj7g25q7sx5mvr55pms6f4da'
   • CSet up a policy to grant all functions read access to the bucket: allow all functions in compartment qa-compartment to read objects in target.bucket.name= "˜input-bucket'
   • DSet up a policy to grant your user account read access to the bucket: allow user XYZ to read objects in compartment qa-compartment where target.bucket.name= "˜input-bucket'
   • ENo policies are needed. By default, every function has read access to Object Storage buckets in the tenancy.

   Show answer

   Correct answer: A, C

   Explanation

   perfect agree A, B..first create dynamic group 'read-file-dg' and then add this function OCID to 'read-file-dg' as per the resource-principals creation rule.

   Adapted from community discussion by melb · 2020-07-15 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   View community discussion2

   Candidate context

   Question 6 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1084 or CertExamHQ.

   1. M

      melb

      2020-07-15

      3 upvotes

      perfect agree A, B..first create dynamic group 'read-file-dg' and then add this function OCID to 'read-file-dg' as per the resource-principals creation rule.

   2. M

      mbanzai

      2020-07-19

      1 upvote

      the required steps are: - create a Dynamic Group with a rule to include Functions in a Compartment (or even functions with a specific name) - create a policy to grant this Dynamic Group the permission to read objects from the Bucket

7. Question 7 of 25

   Per CAP theorem, in which scenario do you NOT need to make any trade-off between the guarantees? (Choose the best answer.)

   • Awhen the are no network partitions
   • Bwhen the system is running in the cloud
   • Cwhen the system is running on-premise
   • Dwhen you are using load balancers

   Show answer

   Correct answer: A

   How others answered

   • A100%

   Explanation

   The provided Answer is Correct. The CAP theorem implies, that in the presence of a network partition, one has to choose between consistency and availability. https://en.wikipedia.org/wiki/CAP_theorem#cite_note-4

   Adapted from community discussion by gfhbox0083 · 2020-07-08 · 8 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   View community discussion1

   Candidate context

   Question 7 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1084 or CertExamHQ.

   1. G

      gfhbox0083

      2020-07-08

      8 upvotes

      The provided Answer is Correct. The CAP theorem implies, that in the presence of a network partition, one has to choose between consistency and availability. https://en.wikipedia.org/wiki/CAP_theorem#cite_note-4

8. Question 8 of 25

   What is one of the differences between a microservice and a serverless function? (Choose the best answer.)

   • AMicroservices are used for long running operations and serverless functions for short running operations.
   • BMicroservices always use a data store and serverless functions never use a data store.
   • CMicroservices are stateless and serverless functions are stateful.
   • DMicroservices are triggered by events and serverless functions are not.

   Show answer

   Correct answer: A

   How others answered

   • A100%

   Explanation

   I would go with A. Microservices are best suited for long-running, complex applications that have significant resource and management requirements. On the other hand, serverless functions only execute when needed. Once the execution is over, the computing instance that runs the code decommissions itself. D is wrong, because both can be triggered by events, both are event driven C is wrong, because Microservices can be stateless or stateful B is wrong, because serverless functions can use datastore to store data.

   Adapted from community discussion by gfhbox0083 · 2020-07-10 · 11 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Microsoft Learn

   View community discussion3

   Candidate context

   Question 8 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1084 or CertExamHQ.

   1. G

      gfhbox0083

      2020-07-10

      11 upvotes

      I would go with A. Microservices are best suited for long-running, complex applications that have significant resource and management requirements. On the other hand, serverless functions only execute when needed. Once the execution is over, the computing instance that runs the code decommissions itself. D is wrong, because both can be triggered by events, both are event driven C is wrong, because Microservices can be stateless or stateful B is wrong, because serverless functions can use datastore to store data.

   2. O

      onlygrass

      2020-12-23

      2 upvotes

      The correct answer should be B. A basic principle of microservices is that each service manages its own data. Two services should not share a data store. Instead, each service is responsible for its own private data store, which other services cannot access directly. Ref: https://docs.microsoft.com/en-us/azure/architecture/microservices/design/data-considerations#:~:text=A%20basic%20principle%20of%20microservices,other%20services%20cannot%20access%20directly. Serverless applications have no place to store persistent data or files. They don’t have a built-in database or permanent file system. https://www.oclc.org/developer/news/2019/storing-data-in-a-serverless-application.en.html#:~:text=Serverless%20applications%20have%20no%20place,export%20via%20a%20web%20application.

   3. A

      Adijobi

      2020-08-02

      2 upvotes

      Answer is A. I swear all the braindumps on the net must come from like two people because I've seen this wrong answer many times.

9. Question 9 of 25

   How can you find details of the tolerations field for the sample YAML file below? (Choose the best answer.)

   

   • Akubectl list pod.spec.tolerations
   • Bkubectl explain pod.spec.tolerations
   • Ckubectl describe pod.spec.tolerations
   • Dkubectl get pod.spec.tolerations

   Show answer

   Correct answer: D

   Supporting references

   • Kubernetes documentation
   • Kubernetes documentation

   View community discussion4

   Candidate context

   Question 9 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1084 or CertExamHQ.

   1. H

      hopewins

      2020-07-12

      9 upvotes

      The answer is B : kubectl explain pod.spec.tolerations Kubectl explain lists the files for supported resources. https://kubernetes.io/docs/reference/generated/kubectl/kubectl-commands#explain https://stackoverflow.com/questions/58790754/using-the-kubectl-explain-command

   2. D

      DikshaGarg

      2020-07-12

      5 upvotes

      Answer is B, https://itnext.io/understanding-kubectl-explain-9d703396cc8

   3. M

      mbanzai

      2020-07-19

      3 upvotes

      Answer B. kubectl explain pod.spec.tolerations is the only one that actually works!

   4. S

      s_muyo

      2020-09-27

      2 upvotes

      The correct answer is B. https://jamesdefabia.github.io/docs/user-guide/kubectl/kubectl_explain/

10. Question 10 of 25

    You are building a container image and pushing it to the Oracle Cloud Infrastructure Registry (OCIR). You need to make sure that these images never get deleted from the repository. Which action should you take? (Choose the best answer.)

    • ACreate a group and assign a policy to perform lifecycle operations on images.
    • BSet global policy of image retention to "Retain All Images".
    • CIn your compartment, write a policy to limit access to the specific repository.
    • DEdit the tenancy global retention policy.

    Show answer

    Correct answer: C

    Explanation

    I will go with B. In each region in a tenancy, there's a global image retention policy. The global image retention policy's default selection criteria retain all images, so that no images are automatically deleted. https://docs.cloud.oracle.com/en-us/iaas/Content/Registry/Tasks/registrymanagingimageretention.htm

    Adapted from community discussion by gfhbox0083 · 2020-07-10 · 7 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Oracle documentation

    View community discussion4

    Candidate context

    Question 10 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1084 or CertExamHQ.

    1. G

       gfhbox0083

       2020-07-10

       7 upvotes

       I will go with B. In each region in a tenancy, there's a global image retention policy. The global image retention policy's default selection criteria retain all images, so that no images are automatically deleted. https://docs.cloud.oracle.com/en-us/iaas/Content/Registry/Tasks/registrymanagingimageretention.htm

    2. D

       doedoe90

       2020-07-20

       4 upvotes

       Correct answer D. If you have manage permission on the tenancy, you can: modify each region's own global image retention policy create new custom image retention policies modify the criteria of existing custom image retention policies delete custom image retention policies https://docs.cloud.oracle.com/en-us/iaas/Content/Registry/Tasks/registrymanagingimageretention.htm

    3. A

       adesmaster

       2020-07-28

       2 upvotes

       There isn't a TENANCY retention policy. There are Global retention policy for each Region.

    4. I

       IT_Thinker

       2021-12-28

       1 upvote

       Ans: D Explanation: Use "Exempt Tags" in the "Global Image Retention Policy...if you want to PREVENT images from being deleted". https://docs.oracle.com/en-us/iaas/Content/Registry/Tasks/registrymanagingimageretention.htm

11. Question 11 of 25

    You are building a cloud native, serverless travel application with multiple Oracle Functions in Java, Python and Node.js. You need to build and deploy these functions to a single application named travel-app. Which command will help you complete this task successfully? (Choose the best answer.)

    • Aoci fn function deploy """"app travel""app """"all
    • Bfn deploy """"app travel""app """"all
    • Coci fn application """"application""name travel""app deploy """"all
    • Dfn function deploy """"all """"application""name travel""app

    Show answer

    Correct answer: B

    Explanation

    Reference: https://blogs.oracle.com/developers/oracle-functions:-serverless-on-oracle-cloud-developers-guide-to-getting-started-quickly

    View community discussion1

    Candidate context

    Question 11 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1084 or CertExamHQ.

    1. G

       gfhbox0083

       2020-07-12

       4 upvotes

       The provided answer is Correct. $ fn deploy ... More info via the additional link https://docs.cloud.oracle.com/en-us/iaas/Content/Functions/Tasks/functionsusingwithfncli.htm

12. Question 12 of 25

    A developer using Oracle Cloud Infrastructure (OCI) API Gateway must authenticate the API requests to their web application. The authentication process must be implemented using a custom scheme which accepts string parameters from the API caller. Which method can the developer use in this scenario? (Choose the best answer.)

    • ACreate an authorizer function using request header authorization.
    • BCreate an authorizer function using token-based authorization.
    • CCreate a cross account functions authorizer.
    • DCreate an authorizer function using OCI Identity and Access Management based authentication.

    Show answer

    Correct answer: A

    Explanation

    I will go with B, using token-based authorization. more info, on Using Authorizer Functions to Add Authentication and Authorization to API Deployments, via the below link https://docs.cloud.oracle.com/en-us/iaas/Content/APIGateway/Tasks/apigatewayusingauthorizerfunction.htm

    Adapted from community discussion by gfhbox0083 · 2020-07-12 · 9 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    View community discussion1

    Candidate context

    Question 12 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1084 or CertExamHQ.

    1. G

       gfhbox0083

       2020-07-12

       9 upvotes

       I will go with B, using token-based authorization. more info, on Using Authorizer Functions to Add Authentication and Authorization to API Deployments, via the below link https://docs.cloud.oracle.com/en-us/iaas/Content/APIGateway/Tasks/apigatewayusingauthorizerfunction.htm

13. Question 13 of 25

    Your organization uses a federated identity provider to login to your Oracle Cloud Infrastructure (OCI) environment. As a developer, you are writing a script to automate some operation and want to use OCI CLI to do that. Your security team doesn't allow storing private keys on local machines. How can you authenticate with OCI CLI? (Choose the best answer.)

    • ARun oci setup keys and provide your credentials
    • BRun oci session refresh """"profile <profile_name>
    • CRun oci session authenticate and provide your credentials
    • DRun oci setup oci""cli""rc """"file path/to/target/file

    Show answer

    Correct answer: C

    Explanation

    Reference: https://blogs.oracle.com/cloud-infrastructure/enabling-any-federated-user-to-invoke-the-oracle-cloud-infrastructure-sdk-and-cli

    Adapted from community discussion by gfhbox0083 · 2020-07-12 · 5 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    View community discussion1

    Candidate context

    Question 13 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1084 or CertExamHQ.

    1. G

       gfhbox0083

       2020-07-12

       5 upvotes

       C, for sure. Now users don't have to create a key pair and upload it into OCI. Instead you can just run "oci session authenticate" and the CLI will open your browser and push you through a (much) simpler process that basically amounts to just logging in and clicking yes.

14. Question 14 of 25

    You are developing a serverless application with Oracle Functions. You have created a function in compartment named prod. When you try to invoke your function you get the following error:

    

    How can you resolve this error? (Choose the best answer.)

    • ACreate a policy: Allow function-family to use virtual-network-family in compartment prod
    • BCreate a policy: Allow any-user to manage function-family and virtual-network-family in compartment prod
    • CCreate a policy: Allow service FaaS to use virtual-network-family in compartment prod
    • DDeleting the function and redeploying it will fix the problem

    Show answer

    Correct answer: C

    Explanation

    Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Functions/Tasks/functionscreatingpolicies.htm#faas-policy-on-network

    Adapted from community discussion by gfhbox0083 · 2020-07-12 · 7 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    View community discussion4

    Candidate context

    Question 14 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1084 or CertExamHQ.

    1. G

       gfhbox0083

       2020-07-12

       7 upvotes

       C, for sure. When Oracle Functions users create a function or application, they have to specify a VCN and a subnet in which to create them. To enable the Oracle Functions service to create the function or application in the specified VCN and subnet, you must create an identity policy to grant the Oracle Functions service access to the compartment to which the network resources belong. Allow service FaaS to use virtual-network-family in compartment

    2. F

       FPM

       2021-02-13

       1 upvote

       My mistake. I don't see 'allow service' in the documentation but I saw the exact policy in the the powerpoint slides and videos. So it is C.

    3. F

       FPM

       2021-02-12

       1 upvote

       Guys, you are all wrong. It is A. 'allow functions-family'. There is no 'allow service'

    4. D

       davidliuatoracle

       2021-01-04

       1 upvote

       where could we find service principal for OCI ? only user and dynamic group are found

15. Question 15 of 25

    Which one of the statements describes a service aggregator pattern? (Choose the best answer.)

    • AIt is implemented in each service separately and uses a streaming service
    • BIt involves implementing a separate service that makes multiple calls to other backend services
    • CIt uses a queue on both sides of the service communication
    • DIt involves sending events through a message broker

    Show answer

    Correct answer: B

    Explanation

    Reference: https://medium.com/@madhukaudantha/microservice-architecture-and-design-patterns-for-microservices-e0e5013fd58a

    Adapted from community discussion by gfhbox0083 · 2020-07-12 · 9 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    View community discussion1

    Candidate context

    Question 15 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1084 or CertExamHQ.

    1. G

       gfhbox0083

       2020-07-12

       9 upvotes

       B, for sure. - Aggregate the data from different services and then send the final response to the consumer. - Aggregator Microservice collects data from multiple Microservices and runs the workflows that must be run, if any, and returns the results to the consumer.

16. Question 16 of 25

    Select 3

    You have created a repository in Oracle Cloud Infrastructure Registry in the us-ashburn-1 (iad) region in your tenancy with a namespace called "heyoci". Which three are valid tags for an image named "myapp"? (Choose three.)

    • Aiad.ocir.io/heyoci/myproject/myapp:0.0.1
    • Bus-ashburn-1.ocir.io/heyoci/myapp:0.0.2-beta
    • Cus-ashburn-1.ocir.io/heyoci/myproject/myapp:0.0.2-beta
    • Dus-ashburn-1.ocir.io/myproject/heyoci/myapp:latest
    • Eiad.ocir.io/myproject/heyoci/myapp:latest
    • Fiad.ocir.io/heyoci/myapp:0.0.2-beta
    • Giad.ocir.io/heyoci/myapp:latest

    Show answer

    Correct answer: A, F, G

    Explanation

    A, F, G are Correct. iad.ocir.io/heyoci/ ... When you use the docker tag command, you'd name the new image with the fully qualified path to its destination, in the format .ocir.io/ / / : https://docs.cloud.oracle.com/en-us/iaas/Content/Registry/Tasks/registrypushingimagesusingthedockercli.htm https://www.oracle.com/webfolder/technetwork/tutorials/obe/oci/registry/index.html

    Adapted from community discussion by gfhbox0083 · 2020-07-14 · 6 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Oracle documentation

    View community discussion4

    Candidate context

    Question 16 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1084 or CertExamHQ.

    1. G

       gfhbox0083

       2020-07-14

       6 upvotes

       A, F, G are Correct. iad.ocir.io/heyoci/ ... When you use the docker tag command, you'd name the new image with the fully qualified path to its destination, in the format .ocir.io/ / / : https://docs.cloud.oracle.com/en-us/iaas/Content/Registry/Tasks/registrypushingimagesusingthedockercli.htm https://www.oracle.com/webfolder/technetwork/tutorials/obe/oci/registry/index.html

    2. I

       IT_Thinker

       2022-01-04

       1 upvote

       IF "heyoci" is the object storage/tenancy namespace, then adhering to the following format... .ocir.io/ / / : Anything NOT "iad.ocir.io/heyoci" or "us-ashburn-1.ocir.io/heyoci" is automatically invalid. (Ans D & E) BOTH of the formats for the are valid. https://docs.oracle.com/en-us/iaas/Content/Registry/Concepts/registryprerequisites.htm B, F & G are missing the field. This leaves ONLY A & C as valid answers. If heyoci is NOT the namespace name, then NONE of the answers are valid. Go figure the available answers are not valid. It should be to choose TWO correct paths.

    3. B

       Balazs_Molnar

       2021-04-26

       1 upvote

       I think BFG is correct /Myproject should not be the part otherwise why B would not be correct the us-ashburn-1.ocir.io is also a valid location

    4. M

       Mumfasa

       2021-02-03

       1 upvote

       BFG are correct answers https://docs.oracle.com/en-us/iaas/Content/Registry/Concepts/registryprerequisites.htm#Availab

17. Question 17 of 25

    You are developing a serverless application with Oracle Functions. Your function needs to store state in a database. Your corporate security standards mandate encryption of secret information like database passwords. As a function developer, which approach should you follow to satisfy this security requirement? (Choose the best answer.)

    • AUse the Oracle Infrastructure Console and enter the password in the function configuration section in the provided input field.
    • BUse Oracle Cloud Infrastructure Key Management to auto-encrypt the password. It will inject the auto-decrypted password inside your function container.
    • CEncrypt the password using Oracle Cloud Infrastructure Key Management. Decrypt this password in your function code with the generated key.
    • DAll function configuration variables are automatically encrypted by Oracle Functions.

    Show answer

    Correct answer: C

    Explanation

    The provided answer C, is correct. Create a KMS vault Create a Master Encryption Key Generate a Data Encryption Key (DEK) from the Master Encryption Key Use the DEK "plaintext" return value to encrypt the "sensitive value" (offline) Store the encrypted "sensitive value" as a config variable in the serverless application Store the DEK ciphertext and the initVector used to encrypt the "sensitive value" as Function config variables Within the function, decrypt the DEK ciphertext back into "plaintext" using the OCID and Cryptographic Endpoint by invoking the OCI KMS SDK Decrypt the "sensitive value" using the decrypted DEK "plaintext" and the initVector https://blogs.oracle.com/developers/oracle-functions-using-key-management-to-encrypt-and-decrypt-configuration-variables https://www.ateam-oracle.com/secure-storage-of-confidential-configuration-data-in-oracle-functions-using-oracle-oci-key-management-services

    Adapted from community discussion by gfhbox0083 · 2020-07-14 · 6 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    View community discussion2

    Candidate context

    Question 17 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1084 or CertExamHQ.

    1. G

       gfhbox0083

       2020-07-14

       6 upvotes

       The provided answer C, is correct. Create a KMS vault Create a Master Encryption Key Generate a Data Encryption Key (DEK) from the Master Encryption Key Use the DEK "plaintext" return value to encrypt the "sensitive value" (offline) Store the encrypted "sensitive value" as a config variable in the serverless application Store the DEK ciphertext and the initVector used to encrypt the "sensitive value" as Function config variables Within the function, decrypt the DEK ciphertext back into "plaintext" using the OCID and Cryptographic Endpoint by invoking the OCI KMS SDK Decrypt the "sensitive value" using the decrypted DEK "plaintext" and the initVector https://blogs.oracle.com/developers/oracle-functions-using-key-management-to-encrypt-and-decrypt-configuration-variables https://www.ateam-oracle.com/secure-storage-of-confidential-configuration-data-in-oracle-functions-using-oracle-oci-key-management-services

    2. N

       NJAIN2380

       2020-07-30

       3 upvotes

       Answer - C https://blogs.oracle.com/developers/oracle-functions-using-key-management-to-encrypt-and-decrypt-configuration-variables

18. Question 18 of 25

    You are working on a cloud native e-commerce application on Oracle Cloud Infrastructure (OCI). Your application architecture has multiple OCI services, including Oracle Functions. You need to trigger these functions directly from other OCI services, without having to run custom code. Which OCI service cannot trigger your functions directly? (Choose the best answer.)

    • AOCI Events Service
    • BOCI Registry
    • COCI API Gateway
    • DOracle Integration

    Show answer

    Correct answer: D

    Explanation

    I will go with Answer A, As it's The Best Answer, and it's ... without having to run custom code You can invoke functions in Oracle Functions from other Oracle Cloud Infrastructure services, using The Events service. The Notifications service. The API Gateway service. The Oracle Integration service, using the OCI Signature Version 1 security policy. Configure Oracle Integration to Call Oracle Cloud Infrastructure Functions with the REST Adapter

    Adapted from community discussion by gfhbox0083 · 2020-07-17 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    View community discussion3

    Candidate context

    Question 18 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1084 or CertExamHQ.

    1. K

       kiran81

       2020-07-17

       8 upvotes

       Answer - B https://docs.cloud.oracle.com/en-us/iaas/Content/Functions/Tasks/functionsintegratingwithother.htm

    2. G

       gfhbox0083

       2020-07-17

       2 upvotes

       I will go with Answer A, As it's The Best Answer, and it's ... without having to run custom code You can invoke functions in Oracle Functions from other Oracle Cloud Infrastructure services, using The Events service. The Notifications service. The API Gateway service. The Oracle Integration service, using the OCI Signature Version 1 security policy. Configure Oracle Integration to Call Oracle Cloud Infrastructure Functions with the REST Adapter

    3. B

       Balazs_Molnar

       2021-04-27

       1 upvote

       Registry can push or pull Docker images, but cannot trigger their execution as far as I know. I would vote on B.

19. Question 19 of 25

    Select 2

    Which two statements are true for serverless computing and serverless architectures? (Choose two.)

    • ALong running tasks are perfectly suited for serverless
    • BServerless function state should never be stored externally
    • CApplication DevOps team is responsible for scaling
    • DServerless function execution is fully managed by a third party
    • EApplications running on a FaaS (Functions as a Service) platform

    Show answer

    Correct answer: B, E

    Explanation

    from fowler's serverless definition: it’s more accurate to say that any state of a FaaS function that is required to be persistent needs to be externalized outside of the FaaS function instance. So B is correct.

    Adapted from community discussion by adesmaster · 2020-07-28 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    View community discussion4

    Candidate context

    Question 19 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1084 or CertExamHQ.

    1. A

       adesmaster

       2020-07-28

       4 upvotes

       Serverless and Function is for short running process not long.

    2. A

       adesmaster

       2020-07-28

       3 upvotes

       from fowler's serverless definition: it’s more accurate to say that any state of a FaaS function that is required to be persistent needs to be externalized outside of the FaaS function instance. So B is correct.

    3. D

       duser

       2020-08-02

       1 upvote

       B and E should be the correct options; B is a much better choice than D. Just think about the difference between Fn and Microservice. Oracle also agrees that functions are stateless - "Functions are stateless, and they require no knowledge about or configuration of the underlying server—hence, the term serverless." Ref. https://developer.oracle.com/java/fn-project-introduction.html.

    4. B

       Balazs_Molnar

       2021-04-27

       1 upvote

       Maybe the answer D is misleading a bit. "Third party" means someone who is not the developer. I think this is why it is called serverless. The developer should not care about the servers because it is managed by a third party (like the cloud provider) I would vote to D,E

20. Question 20 of 25

    Select 2

    Which two statements are true for service choreography? (Choose two.)

    • AService choreographer is responsible for invoking other services.
    • BServices involved in choreography communicate through messages/messaging systems.
    • CService choreography relies on a central coordinator.
    • DService choreography should not use events for communication.
    • EDecision logic in service choreography is distributed.

    Show answer

    Correct answer: D, E

    Explanation

    Reference: https://stackoverflow.com/questions/4127241/orchestration-vs-choreography

    Adapted from community discussion by firstvishal · 2020-08-02 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 20 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1084 or CertExamHQ.

    1. K

       kiran81

       2020-07-17

       9 upvotes

       Answers - B&E https://docs.microsoft.com/en-us/azure/architecture/patterns/choreography

    2. F

       firstvishal

       2020-08-02

       3 upvotes

       B, E Service Choreography Service choreography is a global description of the participating services, which is defined by exchange of messages, rules of interaction and agreements between two or more endpoints. Choreography employs a decentralized approach for service composition. the decision logic is distributed, with no centralized point. Choreography, in contrast, does not rely on a central coordinator. and all participants in the choreography need to be aware of the business process, operations to execute, messages to exchange, and the timing of message exchanges.

    3. B

       Balazs_Molnar

       2021-04-27

       3 upvotes

       Based on the stackoverflow description https://stackoverflow.com/questions/4127241/orchestration-vs-choreography I would also vote on B,E using events is not mentioned, messaging is mentioned and decentralization is also mentioned. Events is a different layer I think.

    4. N

       n00pster

       2020-07-22

       3 upvotes

       Didn't find much OCI documentation around this.. Many blogs and other sources also point to B&E as answer.

21. Question 21 of 25

    Which header is NOT required when signing GET requests to Oracle Cloud Infrastructure APIs? (Choose the best answer.)

    • Adate or x-date
    • B(request-target)
    • Ccontent-type
    • Dhost

    Show answer

    Correct answer: C

    How others answered

    • C100%

    Explanation

    The answer is definitely C (content-type). For GET and DELETE requests (when there's no content in the request body), the signing string must include at least these headers: (request-target) (as described in draft-cavage-http-signatures-08) host date or x-date (if both are included, Oracle uses x-date) https://docs.cloud.oracle.com/en-us/iaas/Content/API/Concepts/signingrequests.htm

    Adapted from community discussion by Cchzeck · 2020-07-12 · 9 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Oracle documentation

    View community discussion2

    Candidate context

    Question 21 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1084 or CertExamHQ.

    1. C

       Cchzeck

       2020-07-12

       9 upvotes

       The answer is definitely C (content-type). For GET and DELETE requests (when there's no content in the request body), the signing string must include at least these headers: (request-target) (as described in draft-cavage-http-signatures-08) host date or x-date (if both are included, Oracle uses x-date) https://docs.cloud.oracle.com/en-us/iaas/Content/API/Concepts/signingrequests.htm

    2. M

       Minghon

       2021-11-26

       Selected C1 upvote

       For GET and DELETE requests (when there's no content in the request body), the signing string must include at least these headers: * (request-target) (as described in draft-cavage-http-signatures-08) * host * date or x-date (if both are included, Oracle uses x-date) Reference: https://docs.oracle.com/en-us/iaas/Content/API/Concepts/signingrequests.htm#five

22. Question 22 of 25

    With the volume of communication that can happen between different components in cloud-native applications, it is vital to not only test functionality, but also service resiliency. Which statement is true with regards to service resiliency? (Choose the best answer.)

    • AResiliency is about recovering from failures without downtime or data loss.
    • BA goal of resiliency is not to bring a service to a functioning state after a failure.
    • CResiliency testing can be only done in a test environment.
    • DResiliency is about avoiding failures.

    Show answer

    Correct answer: A

    How others answered

    • A100%

    Explanation

    I go with A. Resiliency is the ability of your system to react to failure and still remain functional. It's not about avoiding failure, but accepting failure and constructing your cloud-native services to respond to it. You want to return to a fully functioning state quickly as possible. https://docs.microsoft.com/en-us/dotnet/architecture/cloud-native/resiliency

    Adapted from community discussion by examtaker1 · 2020-07-20 · 11 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 22 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1084 or CertExamHQ.

    1. E

       examtaker1

       2020-07-20

       11 upvotes

       I go with A. Resiliency is the ability of your system to react to failure and still remain functional. It's not about avoiding failure, but accepting failure and constructing your cloud-native services to respond to it. You want to return to a fully functioning state quickly as possible. https://docs.microsoft.com/en-us/dotnet/architecture/cloud-native/resiliency

    2. G

       goodh32

       2020-07-22

       4 upvotes

       Resiliency is the ability to recover from failures and continue to function. It isn't about avoiding failures but accepting the fact that failures will happen and responding to them in a way that avoids downtime or data loss https://docs.microsoft.com/en-us/dotnet/architecture/microservices/implement-resilient-applications/#:~:text=Resiliency%20is%20the%20ability%20to,avoids%20downtime%20or%20data%20loss.

    3. M

       Minghon

       2021-11-21

       Selected A2 upvotes

       Resiliency is the ability of your system to react to failure and still remain functional. It's not about avoiding failure, but accepting failure and constructing your cloud-native services to respond to it. Reference: https://docs.microsoft.com/en-us/dotnet/architecture/cloud-native/resiliency

    4. A

       Ani_1811

       2020-07-27

       3 upvotes

       We are continuing despite failures so we are not avoiding failure here i go with A

23. Question 23 of 25

    You encounter an unexpected error when invoking the Oracle Function named "myfunction" in application "myapp". Which can you use to get more information on the error? (Choose the best answer.)

    • Afn """"debug invoke myapp myfunction
    • BDEBUG=1 fn invoke myapp myfunction
    • Cfn """"verbose invoke myapp myfunction
    • DCall Oracle support with your error message

    Show answer

    Correct answer: B

    How others answered

    • B100%

    Explanation

    Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Functions/Tasks/functionstroubleshooting.htm

    Adapted from community discussion by ArshadRock · 2020-07-19 · 7 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Oracle documentation

    View community discussion2

    Candidate context

    Question 23 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1084 or CertExamHQ.

    1. A

       ArshadRock

       2020-07-19

       7 upvotes

       Correct Answer: Using DEBUG=1 to see more details about an error If you encounter an unexpected error when using an Fn Project CLI command, you can find out more about the problem by starting the command with the string DEBUG=1 and running the command again. For example: $ DEBUG=1 fn invoke helloworld-app helloworld-func

    2. M

       Minghon

       2021-11-26

       Selected B1 upvote

       Use DEBUG=1 to see details about requests and responses sent to and from the Oracle Functions service. For example, $ DEBUG=1 fn invoke helloworld-app helloworld-func Reference: https://docs.oracle.com/en-us/iaas/Content/Functions/Tasks/functionstroubleshooting.htm

24. Question 24 of 25

    Select 2

    Which two are required to enable Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) cluster access from the kubectl CLI? (Choose two.)

    • AAn SSH key pair with the public key added to cluster worker nodes.
    • BInstall and configure the OCI CLI
    • COCI Identity and Access Management Auth Token
    • DTiller enabled on the OKE cluster
    • EA configured OCI API signing key pair

    Show answer

    Correct answer: B, E

    How others answered

    • BE100%

    Explanation

    To access the cluster using a local installation of kubectl: 1. Generate an API signing key pair (if you don't already have one). 2. Upload the public key of the API signing key pair. 3. Install and configure the Oracle Cloud Infrastructure CLI. 4. Set up the kubeconfig file. Reference: https://docs.oracle.com/en-us/iaas/Content/ContEng/Tasks/contengdownloadkubeconfigfile.htm

    Adapted from community discussion by Minghon · 2021-11-21 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Oracle documentation

    View community discussion2

    Candidate context

    Question 24 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1084 or CertExamHQ.

    1. M

       Minghon

       2021-11-21

       Selected B, E2 upvotes

       To access the cluster using a local installation of kubectl: 1. Generate an API signing key pair (if you don't already have one). 2. Upload the public key of the API signing key pair. 3. Install and configure the Oracle Cloud Infrastructure CLI. 4. Set up the kubeconfig file. Reference: https://docs.oracle.com/en-us/iaas/Content/ContEng/Tasks/contengdownloadkubeconfigfile.htm

    2. G

       gfhbox0083

       2020-07-08

       2 upvotes

       B, and E for sure. To access the cluster using a local installation of kubectl and the Kubernetes Dashboard: Generate an API signing key pair (if you don't already have one). Upload the public key of the API signing key pair. Install and configure the Oracle Cloud Infrastructure CLI. Set up the kubeconfig file. https://docs.cloud.oracle.com/en-us/iaas/Content/ContEng/Tasks/contengdownloadkubeconfigfile.htm

25. Question 25 of 25

    In order to effectively test your cloud-native applications, you might utilize separate environments (development, testing, staging, production, etc.) Which Oracle Cloud Infrastructure (OCI) service can you use to create and manage your infrastructure? (Choose the best answer.)

    • AOCI Compute
    • BOCI Container Engine for Kubernetes
    • COCI Resource Manager
    • DOCI API Gateway

    Show answer

    Correct answer: C

    Explanation

    C, for sure Resource Manager is an Oracle Cloud Infrastructure service that allows you to automate the process of provisioning your Oracle Cloud Infrastructure resources. Using Terraform, Resource Manager helps you install, configure, and manage resources through the "infrastructure-as-code" model.

    Adapted from community discussion by gfhbox0083 · 2020-07-08 · 6 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    View community discussion1

    Candidate context

    Question 25 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1084 or CertExamHQ.

    1. G

       gfhbox0083

       2020-07-08

       6 upvotes

       C, for sure Resource Manager is an Oracle Cloud Infrastructure service that allows you to automate the process of provisioning your Oracle Cloud Infrastructure resources. Using Terraform, Resource Manager helps you install, configure, and manage resources through the "infrastructure-as-code" model.

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

1Z0-1084 practice, question 1 of 25