1Z0-1084 practice questions 11–20

1. Question 11 · 60 in bank

   Select 2

   You are developing a serverless application with Oracle Functions and Oracle Cloud Infrastructure Object Storage. Your function needs to read a JSON file object from an Object Storage bucket named "input-bucket" in compartment "qa-compartment". Your corporate security standards mandate the use of Resource Principals for this use case. Which two statements are needed to implement this use case? (Choose two.)

   • ASet up a policy with the following statement to grant read access to the bucket: allow dynamic-group read-file-dg to read objects in compartment qa-compartment where target.bucket.name= "˜input-bucket'
   • BSet up the following dynamic group for your function's OCID: Name: read-file-dg Rule: resource.id = "˜ocid1.fnfunc.oc1.phx.aaaaaaaakeaobctakezjz5i4ujj7g25q7sx5mvr55pms6f4da'
   • CSet up a policy to grant all functions read access to the bucket: allow all functions in compartment qa-compartment to read objects in target.bucket.name= "˜input-bucket'
   • DSet up a policy to grant your user account read access to the bucket: allow user XYZ to read objects in compartment qa-compartment where target.bucket.name= "˜input-bucket'
   • ENo policies are needed. By default, every function has read access to Object Storage buckets in the tenancy.

   Show answer

   Answer: AC

   Explanation

   perfect agree A, B..first create dynamic group 'read-file-dg' and then add this function OCID to 'read-file-dg' as per the resource-principals creation rule.

   Source: Adapted from community discussion — melb

   Next question

2. Question 12 · 60 in bank

   Per CAP theorem, in which scenario do you NOT need to make any trade-off between the guarantees? (Choose the best answer.)

   • Awhen the are no network partitions
   • Bwhen the system is running in the cloud
   • Cwhen the system is running on-premise
   • Dwhen you are using load balancers

   Show answer

   Answer: A

   Explanation

   The provided Answer is Correct. The CAP theorem implies, that in the presence of a network partition, one has to choose between consistency and availability. https://en.wikipedia.org/wiki/CAP_theorem#cite_note-4

   Source: Adapted from community discussion — gfhbox0083

   Next question

3. Question 13 · 60 in bank

   You created a pod called "nginx" and its state is set to Pending. Which command can you run to see the reason why the "nginx" pod is in the pending state? (Choose the best answer.)

   • Akubectl logs pod nginx
   • Bkubectl describe pod nginx
   • Ckubectl get pod nginx
   • DThrough the Oracle Cloud Infrastructure Console

   Show answer

   Answer: B

   Explanation

   Reference: https://github.com/kubernetes/kubernetes/issues/49314

   Source: Adapted from community discussion — gfhbox0083

   References

   • Kubernetes documentation

   Next question

4. Question 14 · 60 in bank

   A pod security policy (PSP) is implemented in your Oracle Cloud Infrastructure Container Engine for Kubernetes cluster. Which rule can you use to prevent a container from running as root using PSP? (Choose the best answer.)

   • ANoPrivilege
   • BRunOnlyAsUser
   • CMustRunAsNonRoot
   • DforbiddenRoot

   Show answer

   Answer: C

   Explanation

   Reference: https://docs.bitnami.com/tutorials/secure-kubernetes-cluster-psp/

   References

   • Kubernetes documentation

   Next question

5. Question 15 · 60 in bank

   What is one of the differences between a microservice and a serverless function? (Choose the best answer.)

   • AMicroservices are used for long running operations and serverless functions for short running operations.
   • BMicroservices always use a data store and serverless functions never use a data store.
   • CMicroservices are stateless and serverless functions are stateful.
   • DMicroservices are triggered by events and serverless functions are not.

   Show answer

   Answer: A

   Explanation

   I would go with A. Microservices are best suited for long-running, complex applications that have significant resource and management requirements. On the other hand, serverless functions only execute when needed. Once the execution is over, the computing instance that runs the code decommissions itself. D is wrong, because both can be triggered by events, both are event driven C is wrong, because Microservices can be stateless or stateful B is wrong, because serverless functions can use datastore to store data.

   Source: Adapted from community discussion — gfhbox0083

   References

   • Microsoft Learn

   Next question

6. Question 16 · 60 in bank

   Select 2

   Which two "Action Type" options are NOT available in an Oracle Cloud Infrastructure (OCI) Events rule definition? (Choose two.)

   • ANotifications
   • BFunctions
   • CStreaming
   • DEmail
   • ESlack

   Show answer

   Answer: AC

   Explanation

   Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Events/Task/managingrules.htm

   Source: Adapted from community discussion — gfhbox0083

   Next question

7. Question 17 · 60 in bank

   Which is NOT a supported SDK on Oracle Cloud Infrastructure (OCI)? (Choose the best answer.)

   • AGo SDK
   • BJava SDK
   • C.NET SDK
   • DRuby SDK
   • EPython SDK

   Show answer

   Answer: C

   Explanation

   Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/API/Concepts/sdks.htm

   Next question

8. Question 18 · 60 in bank

   Select 2

   You want to push a new image in the Oracle Cloud Infrastructure (OCI) Registry. Which two actions do you need to perform? (Choose two.)

   • AAssign a tag via Docker CLI to the image.
   • BGenerate an auth token to complete the authentication via Docker CLI.
   • CGenerate an API signing key to complete the authentication via Docker CLI.
   • DAssign an OCI defined tag via OCI CLI to the image.
   • EGenerate an OCI tag namespace in your repository.

   Show answer

   Answer: AB

   Explanation

   Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Registry/Tasks/registrypushingimagesusingthedockercli.htm

   Source: Adapted from community discussion — gfhbox0083

   Next question

9. Question 19 · 60 in bank

   How can you find details of the tolerations field for the sample YAML file below? (Choose the best answer.)

   

   • Akubectl list pod.spec.tolerations
   • Bkubectl explain pod.spec.tolerations
   • Ckubectl describe pod.spec.tolerations
   • Dkubectl get pod.spec.tolerations

   Show answer

   Answer: D

   References

   • Kubernetes documentation
   • Kubernetes documentation

   Next question

10. Question 20 · 60 in bank

    You are building a container image and pushing it to the Oracle Cloud Infrastructure Registry (OCIR). You need to make sure that these images never get deleted from the repository. Which action should you take? (Choose the best answer.)

    • ACreate a group and assign a policy to perform lifecycle operations on images.
    • BSet global policy of image retention to "Retain All Images".
    • CIn your compartment, write a policy to limit access to the specific repository.
    • DEdit the tenancy global retention policy.

    Show answer

    Answer: C

    Explanation

    I will go with B. In each region in a tenancy, there's a global image retention policy. The global image retention policy's default selection criteria retain all images, so that no images are automatically deleted. https://docs.cloud.oracle.com/en-us/iaas/Content/Registry/Tasks/registrymanagingimageretention.htm

    Source: Adapted from community discussion — gfhbox0083

    References

    • Oracle documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

1Z0-1084 practice, question 11. 60 questions available.