Question 1

As a Cloud Native developer, you develop two services in Node.js and deploy them to two different Container Engine for Kubernetes (OKE) clusters that use the same Virtual Cloud Network (VCN). Your security team wants to analyze the network communication between them. How can this requirement be met in the most cost-effective way?

Options :

A : Rewrite the application and send the application logs to an outside log aggregator.

B : Deploy a third-party logging service and aggregate the network flow logs.

C : Use the OCI Logging service and enable VCN flow logs.

D : Deploy Wireshark and intercept the packets.

Answer: C

Question 2

You are developing a serverless applicationwith Oracle Functions. You have created a function incompartment named prod. When you try to invoke your function you get the following error.Errorinvokingfunction.status:502message:dhcp options ocid1.dhcpoptions.oc1.phx.aaaaaaaac...doesnotexistorOracleFunctionsisnotauthorized touseitHow can you resolve this error?

Options :

A : Create a policy:Allow function-family to use virtual-network-family in compartmentprod

B : Create a policy:Allow any-user to manage function-family and virtual-network-family in compartment prod

C : Create a policy:Allow service FaaS to use virtual-network-family in compartment prod

D : Deleting the function andredeploying it will fix the problem

Answer: C

Question 3

Which two statements accurately describe an Oracle Functions application?

Options :

A : A common context to store configuration variables that are available to all functions in the application.A Docker image containing all the functions that share the same configuration

B : An application based on Oracle Functions, Oracle Cloud Infrastructure (OCI) Events, and OCI API Gateway services.

C : A small block of code invoked in response to an OCI Events service.A logical group of functions

D : A Docker image containing all the functions that share the same configuration

E :

Answer: A,C

Question 4

You are developing a serverless application with Oracle Functions and Oracle Cloud Infrastructure Object Storage. Your function needs to read a JSON file object from an Object Storage bucket named "input-bucket" in compartment "qa-compartment". Your corporate security standards mandate the use of Resource Principals for this use case. Which two statements are needed to implement this use case? (Choose two.)

Options :

A : Set up a policy to grant all functions read access to the bucket: allow all functions in compartment qa-compartment to read objects in target.bucket.name= "input-bucket'

B : Set up a policy to grant your user account read access to the bucket: allow user XYZ to read objects in compartment qa-compartment where target.bucket.name= "input-bucket'

C : Set up the following dynamic group for your function-s OCID: Name: read-file-dg Rule: resource.id = "ocid1.fnfunc.oc1.phx.aaaaaaaakeaobctakezjz5i4ujj7g25q7sx5m vr55pms6f4da'

D : No policies are needed. By default, every function has read access to Object Storage buckets in the tenancy.

E : Set up a policy with the following statement to grant read access to the bucket: allow dynamicgroup read-file-dg to read objects in compartment qa- compartment where target.bucket.name= 'input-bucket'

Answer: C,E

Question 5

You have a containerized application that requires access to an Autonomous Transaction Processing (ATP) Database. Which option is NOT valid when the container is deployed in an OKE cluster? (Choose the best answer.)

Options :

A : Use Kubernetes secrets to configure environment variables on the container with ATP instance OCID, and OCI API credentials. Then use the CreateConnection API endpoint from the service runtime.

B : Install the Oracle Cloud Infrastructure Service Broker on the Kubernetes cluster and deploy ServiceInstance and ServiceBinding resources for ATP. Then use the specified binding name as a volume in the application deployment manifest

C : Create a Kubernetes secret with contents from the instance Wallet files. Use this secret to create a volume mounted to the appropriate path in the application deployment manifest.

D : Enable Oracle REST Data Services for the required schemas and connect via HTTPS.

Answer: B

Confidently Practice Online with Free 1Z0-1084-25 Exam Cram

Buying Options: