最新的Oracle Cloud Infrastructure認證 1z0-1084-26考試題庫

問題1

A DevOps engineer is troubleshooting the Meshifyd application, which is running in an Oracle Cloud Infrastructure (OCI) environment. The engineer has set up the OCI Logging service to store access logs for the application but notices that the logs from the Meshifyd application are not showing up in the logging service. The engineer suspects that there might be an issue with the logging configuration. Which two statements are potential reasons for logs from the Meshifyd application not showing up in the OCI Logging service?

A. The logconfig.json file has incorrect or missing information in the application namespace in the paths field.

B. The logconfig.json file has incorrect or missing OCID for the custom log in the logobjectId field.

C. The OCI Logging service is set up to pre access logs by creating a log group and custom log within the same compartment.

D. The logconfig.json file has incorrect or missing information in the application namespace in the src field.

E. The logconfig.json file has incorrect or missing OCID for the custom log group in the logGroupObjectId field.

正確答案: B,E

說明：（僅 VCESoft 成員可見）

問題2

Your organization mandates that all containerized workloads deployed to Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) must utilize Kubernetes NetworkPolicy resources, such as Calico, to enforce strict micro-segmentation of traffic. You have deployed these workloads to an enhanced OKE cluster using virtual node pools to minimize infrastructure maintenance. During testing, you discover that the Calico installation fails because NetworkPolicy resources and third-party CNI policy integrations are completely unsupported on this specific node configuration. How should you resolve this security implementation challenge while continuing to use VCN-Native Pod Networking?

A. Upgrade your OKE virtual nodes to Kubernetes version 1.30 or higher, which enables native, agentless NetworkPolicy support on virtual nodes.

B. Define an OCI IAM policy that grants the OKE workload identity access to manage network security lists at the virtual node level.

C. Migrate your workloads to managed node pools within the OKE cluster, where VCN-Native Pod Networking supports Calico for NetworkPolicy enforcement.

D. Reconfigure your virtual node pools to use the Flannel overlay plugin, which natively implements network policy isolation on virtual nodes.

正確答案: C

說明：（僅 VCESoft 成員可見）

問題3

You are troubleshooting a containerized microservice on a development host and need to obtain its full configuration metadata, including network settings and volume mounts, in JSON format. Which command should you run to retrieve this detailed information?

A. docker stats

B. docker system

C. docker history

D. docker inspect

正確答案: D

說明：（僅 VCESoft 成員可見）

問題4

You are deploying a containerized database application on a host using the standard Docker engine. To prevent data loss when the container instance is destroyed or updated, you must configure a storage mechanism that isolates application data from the volatile container layer and guarantees persistence. Which TWO statements or approaches correctly describe Docker storage components that satisfy this requirement?

A. Configure the temporary filesystem mount, which persists database writes directly into the host memory even if the container is terminated.

B. Use Docker volumes, which are stored in a host directory fully managed by the Docker engine and protected from external host process modification.

C. Rely on the Docker image layer cache, which commits all runtime transactional database updates back to the read-only parent image.

D. Use Docker bind mounts, which map a specific arbitrary path from the host filesystem directly into the container storage namespace.

E. Utilize the default container writable layer, which automatically persists database writes to the host root disk after the container is removed.

正確答案: B,D

說明：（僅 VCESoft 成員可見）

問題5

A company is developing a new application that needs to process transactions in real time. The company wants to ensure that all transactions are processed in order and that no transaction is lost. Which of these is a correct strategy for leveraging OCI Queue in this scenario?

A. Use a separate queue for each application instance.

B. Use a separate queue for each type of transaction.

C. Use a single queue to process all transactions.

D. Use a priority queue to prioritize requests.

正確答案: C

說明：（僅 VCESoft 成員可見）

問題6

Which feature is typically NOT associated with Cloud Native?

A. Service Meshes

B. Application Servers

C. Declarative APIs

D. Immutable Infrastructure

E. Containers

正確答案: B

說明：（僅 VCESoft 成員可見）

問題7

Which is ONE of the differences between a microservice and a serverless function?

A. Microservices always use a data store while serverless functions never use a data store.

B. Microservices are used for long running operations while serverless functions are used for short running operations.

C. Microservices are stateless while serverless functions are stateful.

D. Microservices are triggered by events while serverless functions are not.

正確答案: B

說明：（僅 VCESoft 成員可見）

問題8

Which TWO statements accurately describe an Oracle Functions application? (Choose two.)

A. A common context to store configuration variables that are available to all functions in the application.
A Docker image containing all the functions that share the same configuration.

B. An application based on Oracle Functions, Oracle Cloud Infrastructure (OCI) Events, and OCI API Gateway services.

C. A small block of code invoked in response to an OCI Events service.A logical group of functions.

D. A Docker image containing all the functions that share the same configuration.

正確答案: A,C

說明：（僅 VCESoft 成員可見）

問題9

Which testing strategy achieves high velocity of deployments and releases of cloud native applications?
(Choose the best answer.)

A. Integration testing

B. Penetration testing

C. Automated testing

D. A/B testing

正確答案: C

說明：（僅 VCESoft 成員可見）

問題10

You developed a microservices-based application that runs in an Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) cluster. It has multiple endpoints that need to be exposed to the public internet.
What is the most cost-effective way to expose multiple application endpoints without adding unnecessary complexity to the application?

A. Deploy an Ingress Controller and use it to expose each endpoint with its own routing endpoint.

B. Use a ClusterIP service type in Kubernetes for each of your service endpoints using a load balancer to expose the endpoints.

C. Create a separate load balancer instance for each service using the lowest 100 Mbps option.

D. Use a NodePort service type in Kubernetes for each of your service endpoints using the node ' s public IP address to access the applications.

正確答案: A

說明：（僅 VCESoft 成員可見）

問題11

Your organization has mandated strict IAM policy isolation for microservices accessing an Oracle Cloud Infrastructure (OCI) Queue named payment-queue in a compartment named prod-payment-compartment. A producer microservice deployed on an OCI Compute instance needs to publish transaction messages into the queue, but corporate security dictates that this microservice must not have permission to view queue configurations, delete queues, or read/consume messages. You have created a dynamic group named payment- producer-dg that contains the Compute instance hosting the producer microservice.
Which IAM policy statement must you write to satisfy this security requirement with the least privilege?

A. Allow dynamic-group payment-producer-dg to use queue-push in compartment prod-payment- compartment

B. Allow dynamic-group payment-producer-dg to use queues in compartment prod-payment-compartment

C. Allow dynamic-group payment-producer-dg to use queue-pull in compartment prod-payment- compartment

D. Allow dynamic-group payment-producer-dg to manage queue-push in compartment prod-payment- compartment

正確答案: A

問題12

A service you are deploying to Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) uses a docker image from a private repository in OCI Registry (OCIR). Which configuration is necessary to provide access to this repository from OKE?

A. Create a docker-registry secret for OCIR with identity Auth Token on the cluster, and specify the imagePullSecret property in the application deployment manifest.

B. Create a dynamic group for nodes in the cluster, and a policy that allows the dynamic group to read repositories in the same compartment.

C. Create a docker-registry secret for OCIR with API key credentials on the cluster, and specify the imagePullSecret property in the application deployment manifest.

D. Add a generic secret on the cluster containing your identity credentials. Then specify a registryCredentials property in the deployment manifest.

正確答案: A

問題13

You are developing a microservice that consumes messages from an Oracle Cloud Infrastructure (OCI) Queue and must delete each message after it is successfully processed. Which OCI CLI command should you use to delete an individual message using its receipt?

A. oci queue messages delete-message --message-id < message_id > --queue-id < queue_OCID >

B. oci queue messages delete-message --message-receipt < message_receipt > --queue-id < queue_OCID >

C. oci queue messages delete --message-receipt < message_receipt > --queue-id < queue_OCID >

D. oci queue messages delete --message-id < message_id > --queue-id < queue_OCID >

正確答案: B

說明：（僅 VCESoft 成員可見）

問題14

Assuming that your function does NOT have the --provisioned-concurrency option enabled, which parameter is used to configure the time period during which an idle function will remain in memory before Oracle Functions removes its container image from memory?

A. timeout

B. access-timeout

C. None, as this time is not configurable.

D. idle-timeout

正確答案: D

說明：（僅 VCESoft 成員可見）

問題15

Which THREE are valid statements regarding the OCI Container Engine for Kubernetes (OKE) service?
(Choose three.)

A. OKE cannot use existing network resources for the creation of a new cluster.

B. You must have access to an Oracle Cloud Infrastructure tenancy. Your tenancy must have sufficient quota on different types of resources.

C. There is a limit of three clusters within each region, but there is no limit on the number of nodes and pods you can create within each cluster.

D. OKE automatically creates and configures new network resources for the new cluster.

正確答案: B,C,D

說明：（僅 VCESoft 成員可見）

最新的Oracle Cloud Infrastructure Developer Professional - 1z0-1084-26免費考試真題

最新更新

站內鏈接

聯系我們