Question 1

Which of these is NOT a valid authentication method for accessing an OCI API Gateway deployment?

Options :

A : HTTP Basic

B : API Key

C : OAuth

D : SAML Token

Answer: D

Question 2

Your organization has deployed their e-commerce application on Oracle Container Engine for Kubernetes (OKE) and they are using the Oracle Cloud Infrastructure Registry (OCIR) service as their Docker image repository. They have deployed the OKE cluster using the 'custom create' option, and their Virtual Cloud Network (VCN) has three public subnets with associated Route Tables, Security Lists, and Internet Gateway. However, their application containers are failing to deploy. On investigation, they discover that the images are not being pulled from the designated OCIR repository, even though the YAML configuration has the correct path to the images. What is a valid concern here that needs to be further investigated?

Options :

A : Security List rule for TCP port 22 needs to be added to connect to the OCIR service.

B : VCN hosting the OKE cluster worker nodes needs to have a NAT gateway to access OCIR repositories.

C : Identity and Access Management (IAM) credentials need to be added for each user that deploys applications to the OKE cluster

D : OKE cluster needs to have a secret with the credentials of their OCIR repository and use that secret in the Kubernetes deployment manifest.

Answer: D

Question 3

You are developing a serverless application with Oracle Functions and Oracle Cloud Infrastructure ObjectStorage- Your function needs to read a JSON file object from an Object Storage bucket named"input-bucket"in compartment "qa-compartment". Your corporate security standards mandate the use of Resource Principalsfor this use case.Which two statements are needed to implement this use case

Options :

A : Set up a policy with the following statement to grant read access to the bucket:allow dynamic-group read-file-dg to read objects in compartment qa-compartment where target .bucket.name=' input-bucket *

B : Set up the following dynamic group for your function-s OCID: Name: read-file-dgRule: resource. id = ' ocid1. f nf unc. ocl -phx. aaaaaaaakeaobctakezj z5i4uj j 7g25q7sx5mvr55pms6f4da !

C : Set up a policy to grant all functions read access to the bucket:allow all functions in compartment qa-compartment to read objects in target.bucket.name='input-bucket'

D : Set up a policy to grant your user account read access to the bucket:allow user XYZ to read objects in compartment qa-compartment where target .bucket,name-'input-bucket'

E : No policies are needed. By default, every function has read access to Object Storage buckets in the tenancy

Answer: A,B

Question 4

You are using Oracle Cloud Infrastructure (OCI) Resource Manager to manage your infrastructure lifecycle and wish to receive an email each time a Terraform action begins. How should you use the OCI Events service to do this without writing any code?

Options :

A : Create a rule in OCI Events service matching the "Resource Manager Stack - Update" condition. Then select "Action Type: Email" and provide the destination email address.

B : Create an OCI Notification topic and email subscription with the destination email address. Then create an OCI Events rule matching "Resource Manager Job - Create" condition, and select the notification topic for the corresponding action

C : Create an OCI Email Delivery configuration with the destination email address. Then create an OCI Events rule matching "Resource Manager Job - Create" condition, and select the email configuration for the corresponding action

D : Create an OCI Notifications topic and email subscription with the destination email address. Then create an OCI Events rule matching "Resource Manager Stack - Update" condition, and select the notification topic for the corresponding action

Answer: B

Question 5

Which one of the statements describes a service aggregator pattern?

Options :

A : It isimplemented in each service separately and uses a streaming service

B : It involves implementing a separate service that makes multiple calls to other backend services

C : It uses a queue on both sides of the service communication

D : It involves sending events through a message broker

Answer: B

Confidently Practice Online with Free 1Z0-1084-26 Exam Cram

Buying Options: