FLASH SALE| BUY 2 & GET ADDITIONAL 25% OFF | Use Coupon - BIGSAVINGS

/ Oracle Cloud / By SkillCertPro

OCI Developer Full Practice Tests

Total Questions: 475 – 8 Mock Exams

Practice Set 1

Your results are here!! for" Oracle Cloud Infrastructure Developer [1Z0-1084-21] Practice Test 1 "
33 of 65 questions answered correctly

Your time: 00:17:21

Your Final Score is : 33

You have attempted : 65
Number of Correct Questions : 33 and scored 33
Number of Incorrect Questions : 32 and Negative marks 0

40.92%
Average score

50.77%
Your score

You can review your answers by clicking view questions.

Important Note : Open Reference Documentation Links in New Tab (Right Click and Open in New Tab).

Restart Test View Answers

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30

31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60

61 62 63 64 65

Answered Review

1. Question
You need to execute a script on a remote instance through Oracle Cloud Infrastructure (OCI) Resource Manager. Which option can you use?

Download the script to a local desktop and execute the script.

Use remote-exec.

Use/bin/sh with the full path to the location of the script to execute the script.

It cannot be done.

Correct
2. Question
You are developing a distributed application and you need a call to a path to always return a specific JSON content deploy an Oracle Cloud Infrastructure API Gateway with th
below API deployment specification.

What is the correct value for type?

JSON_BACKEND

HTTP_BACKEND

CONSTANT_BACKEND

STOCK_RESPONSE_BACKEND

Correct
https://docs.cloud.oracle.com/en-us/iaas/Content/APIGateway/Tasks/apigatewayusinghttpbackend.htm
https://docs.cloud.oracle.com/en-us/iaas/Content/APIGateway/Tasks/apigatewayaddingstockresponses.htm

3. Question
Which two statements accurately describe an Oracle Function application?

A logical group of function.

An application based on Oracle Functions, Oracle Cloud Infrastructure (OCI) Events and OCI API Gateway Services.

A Docker image containing all the functions that share the same configuration.

A common context to store configuration variables that are available to all functions in the application.

A small block code invoked in response to an Oracle Cloud Infrastructure (OCI) Events Service

Incorrect
https://docs.cloud.oracle.com/en-us/iaas/Content/Functions/Concepts/functionsoverview.htm
Above screenshot is from the Oracle Training Presentation material for this course

4. Question
Which TWO statements are true for serverless computing and serverless architecture?

Long running tasks are perfectly suited for serveless.

Serverless function state should never be stored externally.

Application DevOps team is responsible for scaling.

Applications running on Faas (Functions as a Service) platform.

Serverless function execution is fully managed by a third party.

Correct

5. Question
Which Oracle Cloud Infrastructure (OCI) load balancer shapes is used by default OCI container Engine for Kubernetes?

800Mbps

There is no default. The shape has to be specified.

400 Mbps

100Mbps

Incorrect
https://docs.cloud.oracle.com/en-us/iaas/Content/ContEng/Tasks/contengcreatingloadbalancer.htm
Specifying Alternative Load Balancer Shapes
The shape of an Oracle Cloud Infrastructure load balancer specifies its maximum total bandwidth (that is, ingress plus egress). By default, load balancers are created with a
of 100Mbps. Other shapes are available, including 400Mbps and 8000Mbps.

6. Question
Your Oracle Cloud Infrastructure (OCI) container Engine for Kubernetes (OKE) administrator has created an OKE cluster with one node pool in a public subnet. You have been
to provide a log file from one of the nodes for troubleshooting purpose. Which step should you take to obtain the log file?

Ssh into the nodes using private key.

Use the username open and password to login.

It is impossible since OKE is a managed Kubernetes service.

Ssh into the node using public key.

Incorrect
https://docs.cloud.oracle.com/en-us/iaas/Content/ContEng/Tasks/contengcreatingclusterusingoke.htm
Public SSH Key: The public key portion of the key pair you want to use for SSH access to each node in the node pool. The public key is installed on all worker nodes in the c
Note that if you don’t specify a public SSH key, Container Engine for Kubernetes will provide one. However, since you won’t have the corresponding private key, you will no
SSH access to the worker nodes. Note that if you specify that you want the worker nodes in the ‘quick cluster’ to be hosted in a private regional subnet, you cannot use SSH
access them

7. Question
Which statement accurately describes Oracle Cloud Infrastructure (OCI) Load Balancer integration with OCI Container Engine for Kubernetes (OKE)?

OKE service provisions, an OCI Load Balancer instance for each Kubernetes service with LoadBalancer type in the YAML configuration.

OCI Load Balancer instance must be manually provisioned for each Kubernetes service that requires traffic balancing.

OKE service provisions a single OCI Load Balancer instance shared with all Kubernetes services with LoadBalancer type in the YAML configuration.

OCI Load Balancer instance provisioning is triggered by OCI Events Service for each Kubernetes service with LoadBalancer type in the YAML configuration.

Incorrect
https://oracle.github.io/weblogic-kubernetes-operator/faq/oci-lb/
f you are running your Kubernetes cluster on Oracle Container Engine for Kubernetes (commonly known as OKE), you can have OCI automatically provision load balancers fo
by creating a Service of type LoadBalancer instead of (or in addition to) installing an Ingress controller like Traefik or Voyager.

8. Question
You want to push a new image in the Oracle Cloud Infrastructure (OCI) Registry. Which two actions do you need to perform?

Generate an OCI tag namespace in your repository.

Generate an auth token to complete the authentication via Docker CLI.

Assign an OCI defined tag via OCI CLI to the image.

Assign a tag via Docker CLI to the image.

Generate an API signing key to complete the authentication via Docker CLI.

Incorrect
https://docs.cloud.oracle.com/en-us/iaas/Content/Registry/Tasks/registrypushingimagesusingthedockercli.htm
You use the Docker CLI to push images to Oracle Cloud Infrastructure Registry.
To push an image, you first use the docker tag command to create a copy of the local source image as a new image (the new image is actually just a reference to the existin
source image). As a name for the new image, you specify the fully qualified path to the target location in Oracle Cloud Registry where you want to push the image, optional
including the name of a repository.

To push images to Oracle Cloud Infrastructure Registry using the Docker CLI:
If you already have an auth token, go to the next step. Otherwise:
In the top-right corner of the Console, open the Profile menu () and then click User Settings to view the details.
On the Auth Tokens page, click Generate Token.
Enter a friendly description for the auth token. Avoid entering confidential information.
Click Generate Token. The new auth token is displayed.
Copy the auth token immediately to a secure location from where you can retrieve it later, because you won’t see the auth token again in the Console.
Close the Generate Token dialog.

9. Question
When starting a container to run an Oracle Function, the container runs process as which user?

Oracle Function uses the same OCI user to run the processes with no added privilege.

Oracle Function uses root to run any processes inside the container.

Oracle Function doesn't use any default user. It is a responsibility of the Admin to specify one.

Oracle Function uses fn user to run the processes with no added privilege.

Incorrect

10. Question
You are a consumer of Oracle Cloud Infrastructure (OCI) Streaming Service. Which API should you use to read process the stream?

ReadMessages

ListMessages
 GetObject

GetMessages

Correct
https://docs.cloud.oracle.com/en-us/iaas/api/#/en/streaming/20180418/Message/GetMessages

11. Question
In the sample Kubernetes manifest file below, what annotations should you use to add to create a private load balancer in Oracle Cloud Infrastructure (OCI) Container Engine
Kubernetes (OKE)?

Service.beta.kubernetes.io/oci-load-balancer-private: “true Service.beta.kubernetes.io/oci-load-balancer-subnet1: “ocid1.subnet.oci..aaaaaa…vdfw”

Service.beta.kubernetes.io/oci-load-balancer-private: “true”

Service.beta.kubernetes.io/oci-load-balancer-internal: “true”

Service.beta.kubernetes.io/oci-load-balancer-internal: “true Service.beta.kubernetes.io/oci-load-balancer-subnet1: “ocid1.subnet.oci..aaaaaa…vdfw”

Correct
https://docs.cloud.oracle.com/en-us/iaas/Content/ContEng/Tasks/contengcreatingloadbalancer.htm
To create an internal load balancer hosted on a private subnet, add both following annotations in the metadata section of the manifest file:
service.beta.kubernetes.io/oci-load-balancer-internal: “true”service.beta.kubernetes.io/oci-load-balancer-subnet1: “ocid1.subnet.oc1..aaaaaa….vdfw”

12. Question
You have two microservices, A and B running in production. Service A relies on API’s from service B. You want to test changes to service A without deploying all of its
dependencies, which includes service B. Which approach should you take to test service A.

There is no need to explicitly test API’s.

Test using API mocks.

Test the API’s in a private environment.

Test against production APIs.

Correct
https://www.soapui.org/learn/mocking/what-is-api-mocking/

13. Question
Which one of the statements describes a service aggregator pattern?

It is implemented in each service separately and uses a streaming service.

It uses a queue on both sides of the service communication.

It involves implementing a separate service that makes multiple calls of other backend services.

It involves sending events through a message broker

Correct
https://blogs.oracle.com/integration/aggregator-pattern-in-oracle-integration-cloud-via-parking-lot
Aggregator pattern isolates an operation that makes calls to multiple backend microservices, centralising its logic into a specialised microservice.
https://docs.microsoft.com/en-us/azure/architecture/patterns/gateway-aggregation

14. Question
You have been asked to create a stateful application deployed in Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) that requires all of your worker nod
mount persistent volumes.
Which TWO OCI storage services should you use?

Use OCI File Services as persistent volume.

Use OCI Object Storage as persistent volume.

Use OCI Block Volume backed persistent volume.

Use GlusterFS as persistent volume.

Use open source storage solutions on top of OCI.

Incorrect
https://blogs.oracle.com/cloud-infrastructure/using-file-storage-service-with-container-engine-for-kubernetes
One of the best practices for containerized applications is to use stateless containers. However, many real-world applications require stateful behavior for some of their
containers. For example, a classic three-tier application might have three containers:
One for the presentation layer, stateless
One for the application layer, stateless
One for persistence ( such as database), stateful

15. Question
What is the maximum memory threshold for a Oracle Function?

512MB

4096MB

1024MB

2048MB

Incorrect

16. Question
Per CAP (Consistency, Availability, Partition Tolerance) theorem, in which scenario you need NOT make any trade-off between the guarantees?
 When the system is running in the cloud.

When the system is running on on-premise.

When yo are using Load Balancers

When there is no network partitions.

Incorrect
https://en.wikipedia.org/wiki/CAP_theorem
Explanation
No distributed system is safe from network failures, thus network partitioning generally has to be tolerated[5][6]. In the presence of a partition, one is then left with two opt
consistency or availability. When choosing consistency over availability, the system will return an error or a time out if particular information cannot be guaranteed to be up t
due to network partitioning. When choosing availability over consistency, the system will always process the query and try to return the most recent available version of the
information, even if it cannot guarantee it is up to date due to network partitioning.

17. Question
You have created a repository in Oracle Cloud Infrastructure Registry in the us-ashburn-1 (iad) region in your tenency with a namespace called “heyoci”. Which three are valid
for an image named “myapp”?

Iad.ocir.io/myproject/heyoci/myapprlatest

Us-ashburn-I.ocirJo/heyoci/myapp:0.0.2-beta

Us-ashburn-I.ocir.io/heyoci/myproject/myapp:0.0.2 –beta

Iad.ocir.io/heyoci/myapp:latest

Iad.ocir.io/heyoci/myapp:0.0.2-beta

Iad.ocir.oi/heyoci/myproject/myapp:0.0.1

Incorrect
https://docs.cloud.oracle.com/en-us/iaas/Content/Registry/Concepts/registrywhatisarepository.htm
For example, for convenience you might want to group together multiple versions of the acme-web-app image in the acme-dev tenancy in the Ashburn region into a reposito
called project01. You do this by including the name of the repository in the image name when you push the image,
in the format .ocir.io///:.
For example, iad.ocir.io/ansh81vru1zp/project01/acme-web-app:4.6.3. Subsequently, when you use the docker push command, the presence of the repository in the image’
name ensures the image is pushed to the intended repository.

18. Question
A pod security policy (PSP) is implemented in your Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes cluster. Which rule can you use to prevent a container f
running as root using PSP?

RunOnlyAsUser

MustRunAsNonRoot

forbiddenRoot

NoPrivilege

Correct
https://kubernetes.io/docs/concepts/policy/pod-security-policy/
# Require the container to run without root privileges.
rule: ‘MustRunAsNonRoot’
seLinux:
# This policy assumes the nodes are using AppArmor rather than SELinux.
rule: ‘RunAsAny’ supplementalGroups: rule: ‘MustRunAs’ ranges: # Forbid adding the root group. – min: 1 max: 65535 fsGroup: rule: ‘MustRunAs’

19. Question
You are using Oracle Cloud Infrastructure (OCI) Resource Manager to manage your infrastructure lifecycle and wish to receive an email each time a Terraform action begins.
How should you use the OCI Event Service to do this without writing any code?

Create an OCI Email Delivery configuration with the destination email address. Then create an OCI Events rule matching “Resource Manager Job – Create” condition and
select the email configuration for the corresponding action.

Create an OCI Notification topic and email subscription with the destination email address. Then create an OCI Events rule matching ‘Resource Manager job – Create’
 condition, and select the notification topic for the corresponding action.

Create a rule in OCI Events service matching the “Resource Manager Stack – Update’ condition. Then select “Action Type: Email” and provide the destination email addr

Create an OCI Notification topic and email subscription with the destination email address. Then create an OCI Events rule matching ‘Resource Manager Stack – Update
condition and select the notification topic for the corresponding action.

Correct

20. Question
Which is one of the differences between a microservice and serverless function?

Microservices are used for long running operations and serverless functions for short running operations.

Microservices are stateless and serverless functions are stateful.

Microservices are triggered by events and serverless functions are not.

Microservices always use a data store and serverless functions never use a data store.

Incorrect
https://www.cloudflare.com/learning/serverless/glossary/serverless-microservice/

21. Question
Which TWO “Action Type” options are NOT available in an Oracle Cloud Infrastructure (OCI) Events rule definition?

Streaming

Email

Notifications

Slack

Functions

Correct
https://docs.cloud.oracle.com/en-us/iaas/Content/Events/Concepts/eventsoverview.htm
You can only deliver events to certain Oracle Cloud Infrastructure services with a rule. Use the following services to create actions:
Notifications
Streaming
Functions

22. Question
You are building a cloud native serverless travel application with multiple Oracle Functions in Java, Python and Node.js. You need to build and deploy these functions to a sin
applications named travel-app.
Which command will help you to complete this task successfully?

fn deploy --ap travel-app -- all

oci fn function deploy --ap travel-app --all

oci fn application -- travel-app deploy --all

fn function deploy --all --application-name travel-ap

Incorrect

23. Question
You are developing a serverless application with Oracle Functions. You have created a function in compartment named prod. When you try to invoke your function you get th
following error.

Create a policy: Allow any-user to manage function-family and virtual-network-family in compartment prod.

Create a policy: Allow service Faas (Function as a Service) to user virtual-network-family in compartment prod.

Create a policy: Allow function-family to use virtual-network-family in compartment prod.

Deleting the function and redeploying it will fix the problem

 Incorrect
https://docs.cloud.oracle.com/en-us/iaas/Content/Functions/Tasks/functionstroubleshooting.htm

24. Question
What should you use to authenticate yourself before doing docker image pull or push from Oracle Cloud Infrastructure (OCI) Registry?

You must have OCI user name and fingerprint.

You must have an OCI API signing key.

You must have a docker hub user name and password.

You must have an OCI user name and an auth token.

Incorrect

25. Question
Your organisation has built a web based application that has a REST API endpoint. You have been asked to expose the REST endpoint using an appropriate service on Oracle
Infrastructure (OCI).

OCI API Gateway

OCI Container Engine for Kubernetes (OKE)

Oracle Functions

OCI Service Gateway

Correct

26. Question
Which Oracle Cloud Infrastructure (OCI) service is NOT supported using OCI Service Broker for Kubernetes?

OCI Events Service

OCI Object Storage

OCI Autonomous Data Warehouse (ADW)

OCI Streaming Service

OCI Autonomous Transactions processing (ATP)

Incorrect

27. Question
You are processing millions of files in an Oracle Cloud Infrastructure (OCI) Object Storage bucket. Each time a new file is created, you want to send an email to the customer
create an order in a database. The solution should perform and minimize cost.
Which action should you use to trigger this email?

Schedule an Oracle Function that checks the OCI Object Storage bucket every minute and emails the customer when a file is found.

Schedule an Oracle Function that checks the OCI Storage bucket every second and emails the customer when a file is found.

Use OCI Events service and OCI Notification service to send an email each time a file is created.

Schedule a cron job that monitors the OCI Storage bucket and emails the customer when a new file is created.

Correct
https://docs.cloud.oracle.com/en-us/iaas/Content/Events/Concepts/eventsoverview.htm
28. Question
As a Kubernetes Administrator yo need to make sure that the deployed application maintains the desired replica state at all times while updating the application with a new i
What should you do?

Apply maxSurge and MaxUnavailable parameter in deployment spec.

Apply --record option during rolling update

Apply --replicacont when doing the rolling update

Apply --min & --max in rolling update command

Incorrect

29. Question
You are implementing logging in your services that will be running in Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE). Which statement describes th
appropriate logging approach?

All services log to a shared log file.

All services log to an external logging system

All services log to standard output only.

Each service logs to its own log file.

Incorrect
https://kubernetes.io/docs/concepts/cluster-administration/logging/

30. Question
You are working on a serverless DevSecOps application using Oracle Functions. You have deployed a Python function that uses the Oracle Cloud Infrastructure (OCI) Python
stop any OCI compute instance that does not comply with your corporate security standards. There are 3 non-compliant OCI Compute instances. However when you invoke
function none of the instances were stopped.
How should you troubleshoot this?

There is no way to troubleshoot a function running on Oracle Functions.

Enable function tracing in the OCI console and go to OCI monitoring console to see the function stack trace.

Enable function remote debugging in the OCI console and use your favourite IDE to inspect the function running on Oracle Functions.

Enable function logging in the OCI console include some print statements in your function code and use logs to troubleshoot this.

Correct
https://docs.cloud.oracle.com/en-us/iaas/Content/Functions/Tasks/functionsexportingfunctionlogfiles.htm

31. Question
You have a containerized app that requires an Autonomous Transaction Processing (ATP) database. Which option is not valid for a container in Kubernetes?

Use Kubernetes secrets to configure environment variables on the container with ATP instance OCID and OCI API credentials. Then use the CreateConnection API endp
from the service runtime.

Create a Kubernetes secret with contents from the instant Wallet files. Use this secret to create a volume mounted to the appropriate path in the application deployment
manifest.

Install the Oracle Cloud Infrastructure (OCI) Service Broker on the Kubernetes cluster and deploy service instance and service binding resources for ATP. Then use the
specified binding names as a volume in the application deployment manifest.

Enable Oracle REST Data Services for the required schemas and connect via HTTPS.

Correct
https://blogs.oracle.com/developers/creating-an-atp-instance-with-the-oci-service-broker

32. Question
As a cloud-native developer, you have written a web service for your company. You have used Oracle Cloud Infrastructure (OCI) API Gateway service to expose the HTTP bac
However, your security team has suggested that your web service should handle Distributed Denial-of-Service (DDoS) attack. You are time-constrained and you need to mak
that this is implemented as soon as possible. What should you do in this scenario?

Re-write your web service and implement rate limiting.

Use OCI Virtual Cloud Network (VCN) segregation to control DDoS.

Use OCI API Gateway service and configure rate limiting.

Use a third party service integration to implement a DDoS attack mitigation.

Incorrect
https://docs.cloud.oracle.com/en-us/iaas/Content/APIGateway/Tasks/apigatewayaddingrequestpolicies.htm

33. Question
Which concept is NOT related to Oracle Cloud Infrastructure (OCI) Resource Manager?

Queue

Stack

Plan

Job

Incorrect

34. Question
A developer using Oracle Cloud Infrastructure (OCI) API Gateway must authenticate the API requests to their web application. The authentication process must be implemen
using the custom scheme which accepts string parameters from the API caller. Which method can the developer use in this scenario?

Create an authorizer function using OCI Identity and Access Management (IAM) based authentication.

Create a cross account functions authorizer.

Create an authorizer function using token-based authorization.

Create an authorizer function using request header authorization.

Correct
https://docs.cloud.oracle.com/en-us/iaas/Content/APIGateway/Tasks/apigatewayaddingauthzauthn.htm#Creating

35. Question
What is the maximum execution timeout of Oracle Functions?

120 Seconds
 1 Hour

120 minutes

60 Seconds

Correct

36. Question
You have developed a cloud based application that has multiple services, with each serving having one or more consumers. You need to make sure that excessive load or fai
a particular service should not impact all consumers of other services.
Which service design pattern should you choose to mitigate this risk?

Cache-Aside

Bulkhead

Circuit Breaker Pattern

Choreography

Incorrect

37. Question
Which testing approach is a must for achieving high velocity of deployments and release of cloud-native applications?

A/B testing

Integration testing

Penetration testing

Automated testing

Correct
https://blogs.oracle.com/developers/getting-started-with-microservices-part-four
Staged Environment
The following demonstrates one example of how the different testing phases can be implemented in staged environments. In fact, the example below describes at a higher
how release and testing are handled for one of our internal services that was designed using a microservices architecture. Figure 2 shows testing stages during the release
pipeline.

Figure 2: Release Pipeline Testing Stages

Test code quality: At this stage extensive unit and integration tests at the service level are being executed to catch problems early in the cycle.

38. Question
A programmer is developing a Node in a application which will run in a Linux server on their on-premise data center. This application will access various Oracle Cloud Infrastru
(OCI) services using OCI SDK’s. What is the secure way to access OCI services with OCI Identity and Access Management (IAM)?

Create a new OCI IAM user, add the user to a group associated with a policy that grants the desired permissions to OCI services. In the on-premises Linux server, add th
user name and password to a file used by Node.js authentication.

Create a new OCI IAM user associated with a dynamic group and a policy that grants the desired permissions to OCI services. Add the on-premise Linux server in the
dynamic group.

Create an OCI IAM policy with appropriate permissions to access the required OCI services and assign the policy to the on-premises Linux server.

Create a new OCI IAM user, add the user to a group associated with a policy that grants the desired permission to OCI services. In the on-premises Linux server, genera
key pair used for signing API requests and upload the public key to the IAM user.

Correct
https://docs.cloud.oracle.com/en-us/iaas/Content/Functions/Tasks/functionssetupapikey.htm

39. Question
You are using a Windows laptop to write a script using OCI CLI. But when you ran the script, you got this error “The OCI CLI is not found”. What should yo do to make sure
you are able to run OCI from Windows laptop?

Reinstall Python on your Windows Laptop

Make sure that the Scripts directory in your Python installation is not hidden.

Upgrade your OCI CLI version

Make sure that the oci.exe location is in your path.

Correct

40. Question
Your application team wants to use configuration variable for their Application PODS and wants to inject it before the Pod creation. As a Kubernetes Administrator, you have
tasked to come up with the option to achieve this. What should you do?

Use Secrets at the Pod Spec.

Use Configmap in the Pod Spec.

Use PodPreset to create the config outside of Pod.

Use Init Containers

Incorrect

41. Question
You have written a Node.js function and deployed it to Oracle Functions. Next you need to call this function from a microservice written in Java deployed on Oracle Cloud
Infrastructure (OCI) Container Engine for Kubernetes (OKE). Which can help you to achieve this?

Use the OCI Java SDK to invoke the function from the microservice.

Oracle functions does not allow a microservice deployed on OKE to invoke a function.

Use the OCI CLI with kubect1 to invoke the function from the microservice.

OKE does not allow a microservice to invoke a function from Oracle Functions.

Incorrect
https://blogs.oracle.com/developers/oracle-functions-invoking-functions-with-the-oci-sdk

42. Question
Which two handle Oracle Functions authentication automatically?

Fn Project CLI

Signed HTTP Request

 Oracle Cloud Infrastructure (OCI) SDK

cURL

Oracle Cloud Infrastructure (OCI) CLI

Incorrect
https://docs.cloud.oracle.com/en-us/iaas/Content/Functions/Tasks/functionsinvokingfunctions.htm
Invoking Functions
You can invoke a function that you’ve deployed to Oracle Functions in different ways:
Using the Fn Project CLI.
Using the Oracle Cloud Infrastructure CLI.
Using the Oracle Cloud Infrastructure SDKs.
Making a signed HTTP request to the function’s invoke endpoint. Every function has an invoke endpoint.
Each of the above invokes the function via requests to the API. Any request to the API must be authenticated by including a signature and the OCID of the compartment to
the function belongs in the request header. Such a request is referred to as a ‘signed’ request. The signature includes Oracle Cloud Infrastructure credentials in an encrypted
form.
If you use the Fn Project CLI or the Oracle Cloud Infrastructure CLI to invoke a function, authentication is handled for you. See Using the Fn Project CLI to Invoke
Functions and Using the Oracle Cloud Infrastructure CLI to Invoke Functions.
If you use an Oracle Cloud Infrastructure SDK to invoke a function, you can use the SDK to handle authentication. See Using SDKs to Invoke Functions.

43. Question
Which TWO are characteristics of microservices?

Microservices are hard to test in isolation.

All microservices share a data store.

Microservices can be independently deployed

Microservices can be implemented in limited number of programming languages.

Microservices communicate over lightweight API’s.

Correct
https://docs.oracle.com/en/solutions/learn-architect-microservice/index.html#GUID-5830BC1D-CC15-4A3A-B9ED-8A8D84067D7A
https://docs.oracle.com/en/solutions/learn-architect-microservice/design-microservices-based-application1.html#GUID-DD41B64F-0CB9-411E-AFEF-D02CA47AD6D0

44. Question
Which TWO are the benefits of distributed systems?

Ease off testing

Scalability

Privacy

Security

Resiliency

Correct
http://www.oracle.com/us/products/middleware/coherence-data-scalabilitywp-1969585.pdf

45. Question
You are building a container image and pushing it to the Oracle Cloud Infrastructure Registry (OCIR). You need to make sure that these gets deleted from the repository.
Which action should you take?

Edit the tenancy global retention policy.

Create a group and assign a policy to perform lifecycle operations on images.

Set global policy of images retention to “Retain All Images”.

In your compartment, write a policy to limit access to the specific repository.

Incorrect
46. Question
Your application team has developed an Oracle Function that generates the static pages during the function call. They want to user it for all regions of your company in such a
that every regional URL will hit the same application endpoint. You have been asked by the application to use Oracle Cloud infrastructure OCI API Gateway to expose it. How
you achieve this?

Create a OCI API Gateway, Create a deployment and expose the app with exact root path.

Create a OCI API Gateway, Create a deployment adding HTTPS URL of the app.

Create a OCI API Gateway, Create a deployment and add Context variable to the policies & HTTP backend definitions.

Create a OCI API Gateway, Create a deployment and add path parameters and wildcards to root paths.

Correct

47. Question
A leading insurance firm is hosting its customer portal in Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes with an OCI Autonomous Database. Their suppor
discovered a lot of SQL injection attempts and cross-site scripting attacks to the portal, which is starting to affect the production environment. What should they implement t
migrate this attack?

Web Application Firewall.

Network Security List

Network Security Firewall

Network Security Groups (NSG)

Correct

48. Question
How do you perform a rolling update in Kubernetes?

Kubectl upgrade

Kubectl rolling-update --image=image

Kubectl rolling-update

Kubectl update –c

Correct
https://jamesdefabia.github.io/docs/user-guide/kubectl/kubectl_rolling-update/
kubectl rolling-update OLD_CONTROLLER_NAME ([NEW_CONTROLLER_NAME] –image=NEW_CONTAINER_IMAGE | -f NEW_CONTROLLER_SPEC)

49. Question
Your DBA has mentioned that they have a shared service instance of Oracle autonomous transactions processing (APT) Database that many applications can use.
What is the drawback if your want to bring in the existing ATP instance to the Oracle Service Broker?

You can deprovision an Oracle Service Broker

You can unbind an existing Oracle ATP instance.

You can delete an existing ATP instance using Oracle Service Broker.

You can't manage the lifecycle of the ATP instance

Incorrect

50. Question
In order to effectively test your cloud-native applications, you might utilize separate environments (development, testing, staging, production etc.). Which Oracle Cloud
Infrastructure (OCI) service can you use to create and manage your infrastructure?

OCI API Gateway

OCI Resource Manager

OCI Container Engine for Kubernetes

OCI Compute

Correct
https://docs.cloud.oracle.com/en-us/iaas/Content/APIGateway/Concepts/apigatewayoverview.htm
Resource Manager is an Oracle Cloud Infrastructure service that allows you to automate the process of provisioning your oracle Cloud Infrastructure resources. Using Terraf
resource manager helps you install, configure and manage resources through the “infrastructure as code” model.

51. Question
Your organization uses a federated identity provider to login to your Oracle Cloud Infrastructure (OCI) environment. As a developer, you are writing a script to automate some
operation and want to use OCI CLI to do that. Your security team doesn’t allow storing private keys on local machines.
How can you authenticate with OCI CLI?

Run oci session authenticate and provide your credentials

Run oci session refresh --profile

Run oci setup keys and provide your credentials.

Run oci setup oci-cli-rc -- file path/to/target/file

Correct
https://docs.cloud.oracle.com/en-us/iaas/Content/API/SDKDocs/clitoken.htm

52. Question
How can you find details of the tolerations field for the sample YAML file below?

Kubectl get pd.spec.tolerations

Kubectl explain pod.spec.tolerations

Kubectl describe pod.spec.tolerations

Kubectl list pod.spec.tolerations

Correct
https://kubernetes.io/docs/reference/kubectl/overview/#examples-common-operations

53. Question
Which is NOT a valid option to execute a function deployed on Oracle Functions?

Invoke from Fn Project CLI.

Invoke from Docker CLI

Send a signed HTTP requests to the function’s invoke endpoint.

Trigger by an event in Oracle Cloud Infrastructure (OCI) Event Service.

Invoke from Oracle Cloud Infrastructure (OCI) CLI

Correct
https://docs.cloud.oracle.com/en-us/iaas/Content/Functions/Tasks/functionsinvokingfunctions.htm

54. Question
You are deploying a polyglot serverless application using Oracle Functions. Which language cannot be used to write your function code?

Python

PL/SQL

Java

Node.js

Correct
https://medium.com/ibm-garage/openwhisk-polyglot-application-with-ibm-cloud-functions-1209186ee1df
In this blog post, we’ll explore and demonstrate the fundamentals of Apache OpenWhisk on IBM Cloud with IBM Functions and demonstrate setting up and running it as w
We will also show integration with various services, including the Cloudant database and develop the different implementation languages, such as Node.js, Python, and Jav
polyglot application.
https://static.rainfocus.com/oracle/oraclecode18/sess/1518198529788001C8QZ/PF/Containers_Serverless_Functions_upld_1524062993674001FkAr_1524688343891001kZ
Polyglot. Supports a long list of languages (Java, Node.js, Python, Ruby, Go, …)
55. Question
Your priority is to use Infrastructure as a Code (IaC) in a team environment where your team needs to have access to the deployed infrastructure state data.
What should you do to access to the state file for all of the team members?

Use a copy of the Local State file on each Team Members workstation.

Use Remote State File.

Use Target Files

Use Instance Principal

Correct

56. Question
You encounter an unexpected error when invoking the Oracle Function named “myfunction” in application “myapp”. Which can you use to get more information on the error?

Fn -- debug invoke myapp myfunction.

Fn -- verbose invoke myapp myfunction

Call Oracle Support with your error message.

DEBUG= 1 fn invoke myapp myfunction

Incorrect
https://docs.cloud.oracle.com/en-us/iaas/Content/Functions/Tasks/functionstroubleshooting.htm

57. Question
A service you are deploying to Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) uses a Docker image from a private repository. Which configuration i
necessary to provide access to this repository from OKE?

Create a Docker-registry secret for OCIR with API key credentials on the cluster and speficy the “imagePullSecret” property in the application deployment manifest.

Create a Docker-registry secret for OCIR with identity Auth Token on the cluster and specify the “imagePullSecret” property in the application deployment manifest.

Create a dynamic group for nodes in the cluster and add a policy that allows the dynamic group to read repositories in the same component.

Add a generic secret on the cluster containing your identity credentials. Then specify a registry credentials properly in the deployment manifest.

Incorrect

58. Question
You are deploying an API via Oracle Cloud Infrastructure (OCI) API Gateway and you want to implement request policies to control access.
Which is NOT available for OCI API Gateway?

Limiting the number of requests sent to backend services.

Controlling access to OCI resources.

Providing authentication and authorization.

 Enabling CORS (Cross-Origin Resource Sharing) Support.

Correct

59. Question
You are developing a serverless application with Oracle Functions. Your function needs to store state in a database. Your corporate security standards mandate encryption of
information like database passwords. As a function developer, which approach should you follow to satisfy this security requirement.

Use the Oracle Cloud Infrastructure (OCI) Console and enter the password in the function configuration section in the provided input filed.

All function configuration variable are automatically encrypted by Oracle Functions.

Encrypt the password using Oracle Cloud Infrastructure (OCI) Key Management. Decrypt this password in your function code with the generated key.

Use Oracle Cloud Infrastructure (OCI) Key Management to auto-encrypt the password. It will inject the auto-decrypted password inside your function container.

Incorrect

60. Question
In a Linux environment, what is the default location of the configuration file that Oracle Cloud Infrastructure (OCI) uses for profile information?

SHOME/.oci/config

/usr/local/bin/config

/usr/bin/.oci/config

/etc/.oci/config

Correct
https://docs.cloud.oracle.com/en-us/iaas/Content/API/Concepts/sdkconfig.htm
File Name and Location
The default configuration file name and location is ~/.oci/config
https://docs.cloud.oracle.com/en-us/iaas/Content/Functions/Tasks/functionsconfigureocicli.htm?Highlight=OCI%20Configuation%20file%20path

61. Question
You are tasked with developing an application that requires the use of Oracle Cloud Infrastructure (OCI) API’s to POST messages to a stream in the OCI Streaming Service. W
statement is incorrect?

The content-type header must be set to application JSON.

The request must include an authorization signing string including (but not limited to) x-content-sha256, content-type and content-length headers.

The request does not require an authorization header.

A HTTP 401 will be returned if the client’s clock is skewed more than 5 minutes from the server’s.

Correct
https://docs.cloud.oracle.com/en-us/iaas/Content/API/Concepts/signingrequests.htm
For GET and DELETE requests (when there’s no content in the request body), the signing string must include at least these headers:
request-target, host, date or x-date
For PUT and POST requests (when there’s content in the request body), the signing string must include at least these headers:
Request-target, host, date or x-date, x-content-sha256, content-type, content-length.

62. Question
With the volume of communication that can happen between different components in cloud-native applications, it is vital to not only test functionality, but also service resilie
Which statement is true with regards to service resiliency?

Resiliency is about recovering from failures without downtime or data loss.

Resiliency testing can be only done in a test environment.

Resiliency is about avoiding failures.

A goal of resiliency is not to bring a service to a functioning state after a failure.

Incorrect
 63. Question
What is the minimum of storage that a persistent volume claim can obtain in Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE)?

1GB

1TB

50GB

10GB

Incorrect
https://docs.cloud.oracle.com/en-us/iaas/Content/ContEng/Tasks/contengcreatingpersistentvolumeclaim.htm

64. Question
You created a pod called “nginx” and its state is set to pending. Which command can you run to see the reason why the “nginx” pod is in the pending state?

Kubect2 logs pd nginx

Kubect2 describe pod nginx

Kubect2 get pod nginx

Through the Oracle Cloud Infrastructure Console (OCI)

Incorrect

65. Question
What are the different ways to get authenticated using Oracle Cloud Infrastructure (OCI) SDK? Select all that apply.

Using OCI CLI Config file

Using Username and password on standard tty

Using Service Principal

Using Resource Principal.

Using Instance Principal

Using Security Token.

Incorrect

Use Page numbers below to navigate to other practice tests

Pages: 1 2 3 4 5 6 7 8

← Previous Post Next Post →

We help you to succeed in your certification exams

We have helped over thousands of working professionals to achieve their certification goals with our practice tests.

Skillcertpro
 Quick Links

ABOUT US
FAQ
BROWSE ALL PRACTICE TESTS
CONTACT FORM

Important Links

REFUND POLICY
REFUND REQUEST
TERMS & CONDITIONS
PRIVACY POLICY

Privacy Policy