Download Online VALID 1z0-1084-23 Exam Dumps File Instantly[Oct 14, 2023]
1z0-1084-23 Exam Dumps For Certification Exam Preparation
Oracle 1z0-1084-23 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
NEW QUESTION # 54
You are developing a serverless application with Oracle Functions and Oracle Cloud Infrastructure Object Storage. Your function needs to read a JSON file object from an Object Storage bucket named "input-bucket" in compartment "qa-compartment". Your corporate security standards mandate the use of Resource Principals for this use case. Which two statements are needed to implement this use case? (Choose two.)
- A. Set up a policy to grant your user account read access to the bucket: allow user XYZ to read objects in compartment qa-compartment where target.bucket.name= "input-bucket'
- B. Set up a policy with the following statement to grant read access to the bucket: allow dynamic-group read-file-dg to read objects in compartment qa- compartment where target.bucket.name= 'input-bucket'
- C. Set up a policy to grant all functions read access to the bucket: allow all functions in compartment qa-compartment to read objects in target.bucket.name= "input-bucket'
- D. No policies are needed. By default, every function has read access to Object Storage buckets in the tenancy.
- E. Set up the following dynamic group for your function's OCID: Name: read-file-dg Rule: resource.id = "ocid1.fnfunc.oc1.phx.aaaaaaaakeaobctakezjz5i4ujj7g25q7sx5m vr55pms6f4da'
Answer: B,E
Explanation:
The correct answers are: Set up the following dynamic group for your function's OCID: Name: read-file-dg Rule: resource.id = "ocid1.fnfunc.oc1.phx.aaaaaaaakeaobctakezjz5i4ujj7g25q7sx5mvr55pms6f4da" Set up a policy with the following statement to grant read access to the bucket: Statement: allow dynamic-group read-file-dg to read objects in compartment qa-compartment where target.bucket.name = 'input-bucket' To implement the use case of reading a JSON file object from an Object Storage bucket using Resource Principals with Oracle Functions, you need to configure the following: Create a dynamic group named "read-file-dg" and associate it with your function's OCID. This dynamic group helps identify the function as a member of the group for policy enforcement. Create a policy that grants read access to the bucket. The policy statement should allow the dynamic group "read-file-dg" to read objects in the compartment "qa-compartment" and specify the target bucket name as "input-bucket". This policy ensures that the function has the necessary permissions to access the specified bucket. By setting up the dynamic group and policy, you ensure that the function, as a member of the dynamic group, has the required read access to the specified Object Storage bucket in the specified compartment.
NEW QUESTION # 55
A DevOps engineer is troubleshooting the Meshifyd application, which is running in an Oracle Cloud Infrastructure (OCI) environment. The engineer has set up the OCI Logging service to store access logs for the application but notices that the logs from the Meshifyd application are not showing up in the logging service.
The engineer suspects that there might be an issue with the logging configuration. Which two statements are potential reasons for logs from the Meshifyd application not showing up in the OCI Logging service?
- A. The OCI Logging service is set up to pre access logs by creating a log group and custom log within the same compartment.
- B. The logconfig.json file has incorrect or missing OCID for the custom log group in the logGroupObjectId field.
- C. The logconfig.json file has incorrect or missing information in the application namespace in the src field.
- D. The logconfig.json file has incorrect or missing information in the application namespace in the paths field.
- E. The logconfig.json file has incorrect or missing OCID for the custom log in the logobjectId field.
Answer: B,E
Explanation:
Explanation
The logconfig.json file is a configuration file that specifies how the Unified Monitoring Agent collects and uploads custom logs to the OCI Logging service2. The logconfig.json file contains an array of objects, each representing a custom log configuration2. Each custom log configuration object has the following fields2:
* logGroupObjectId: The OCID of the log group where the custom log is stored.
* logObjectId: The OCID of the custom log.
* paths: An array of paths to files or directories containing the custom logs.
* src: A regular expression that matches the files containing the custom logs.
* parser: A parser definition that specifies how to parse the custom logs. If the logconfig.json file has incorrect or missing OCID for the custom log in the logobjectId field, or incorrect or missing OCID for the custom log group in the logGroupObjectId field, then the Unified Monitoring Agent will not be able to upload the custom logs to the OCI Logging service2. Therefore, these are potential reasons for logs from the Meshifyd application not showing up in the OCI Logging service. Verified References: Unified Monitoring Agent Configuration File
NEW QUESTION # 56
What can you use to dynamically make Kubernetes resources discoverable to public DNS servers? (Choose the best answer.)
- A. kubeDNS
- B. CoreDNS
- C. ExternalDNS
- D. DynDNS
Answer: C
Explanation:
Explanation
To dynamically make Kubernetes resources discoverable to public DNS servers, you can use ExternalDNS.
ExternalDNS is a Kubernetes add-on that automates the management of DNS records for your Kubernetes services and ingresses. It can be configured to monitor the changes in your Kubernetes resources and automatically update DNS records in a supported DNS provider. By integrating ExternalDNS with your Kubernetes cluster, you can ensure that the DNS records for your services and ingresses are automatically created, updated, or deleted based on changes in your Kubernetes resources. This allows your Kubernetes resources to be discoverable by external systems through public DNS servers.
NEW QUESTION # 57
What is the difference between continuous delivery and continuous deployment in the DevOps methodology? (Choose the best answer.)
- A. Continuous delivery is a process that Initiates deployment manually, whereas continuous deployment is based on automating the deployment process.
- B. Continuous delivery requires automatic linting, whereas continuous deployment testing must be run manually.
- C. Continuous delivery involves automation of developer tasks, whereas continuous deployment involves manual operational tasks.
- D. Continuous delivery utilizes automatic deployment to a development environment, whereas continuous deployment involves automatic deployment to a production environment.
Answer: D
Explanation:
The two correct differences between continuous delivery and continuous deployment in the DevOps lifecycle are: Continuous delivery is a process that initiates deployment manually, while continuous deployment is based on automating the deployment process. In continuous delivery, the software is ready for deployment, but the decision to deploy is made manually by a human. On the other hand, continuous deployment automates the deployment process, and once the software passes all the necessary tests and quality checks, it is automatically deployed without human intervention. Continuous delivery utilizes automatic deployment to a development environment, while continuous deployment involves automatic deployment to a production environment. In continuous delivery, the software is automatically deployed to a development or staging environment for further testing and validation. However, the actual deployment to the production environment is performed manually. In continuous deployment, the software is automatically deployed to the production environment, eliminating the need for manual intervention in the deployment process. These differences highlight the level of automation and human involvement in the deployment process between continuous delivery and continuous deployment approaches in the DevOps lifecycle.
NEW QUESTION # 58
Which THREE are valid statements regarding the OCI Container Engine for Kubernetes (OKE) service? (Choose three.)
- A. OKE automatically creates and configures new network resources for the new cluster.
- B. You must have access to an Oracle Cloud Infrastructure tenancy. Your tenancy must have sufficient quota on different types of resources.
- C. OKE cannot use existing network resources for the creation of a new cluster.
- D. There is a limit of three clusters within each region, but there is no limit on the number of nodes and pods you can create within each cluster.
Answer: A,B,D
Explanation:
The valid statements regarding the OCI Container Engine for Kubernetes (OKE) service are: OKE automatically creates and configures new network resources for the new cluster. When creating a new OKE cluster, the service automatically provisions and configures the necessary network resources, such as VCNs, subnets, route tables, security lists, and load balancers, to support the cluster. Your tenancy must have sufficient quota on different types of resources. Before creating an OKE cluster, you need to ensure that your Oracle Cloud Infrastructure (OCI) tenancy has sufficient quota for the required resources, such as compute instances, block storage, networking resources, and load balancers. You must have access to an Oracle Cloud Infrastructure tenancy. To use the OKE service, you need to have access to an OCI tenancy. This means you must have a valid OCI account and the necessary permissions to create and manage resources within the tenancy. The following statements are not valid: OKE cannot use existing network resources for the creation of a new cluster. OKE creates new network resources specifically for the cluster, and it does not support using existing network resources. There is a limit of three clusters within each region, but there is no limit on the number of nodes and pods you can create within each cluster. This statement is incorrect. There is no specific limit on the number of clusters you can create within a region in OKE. However, there may be certain limits or quotas on resources that can impact the number of clusters you can create.
NEW QUESTION # 59
Which testing strategy achieves high velocity of deployments and releases of cloud native applications? (Choose the best answer.)
- A. A/B testing
- B. Integration testing
- C. Penetration testing
- D. Automated testing
Answer: D
Explanation:
The testing strategy that achieves high velocity of deployments and releases of cloud native applications is "Automated testing." Automated testing involves the use of automated tools and frameworks to execute tests, validate functionality, and detect issues or bugs in an application. By automating the testing process, developers and DevOps teams can rapidly test and validate code changes, ensuring that new features and updates are functioning correctly before being deployed to production. This approach helps increase the speed and efficiency of the testing process, allowing for faster and more frequent deployments of cloud native applications.
NEW QUESTION # 60
Which two "Action Type" options are NOT available in an Oracle Cloud Infrastructure (OCI) Events rule definition? (Choose two.)
- A. Functions
- B. Slack
- C. Streaming
- D. Notifications
- E. Email
Answer: B,E
Explanation:
Explanation
The two "Action Type" options that are NOT available in an Oracle Cloud Infrastructure (OCI) Events rule definition are: Email (Correct) Slack (Correct) The available "Action Type" options in OCI Events rule definition include Functions, Notifications, and Streaming. However, email and Slack are not directly supported as action types in OCI Events. Instead, you can use Notifications to send notifications to various notification channels, including email and Slack, through the OCI Notifications service.
NEW QUESTION # 61
Which of these is NOT a valid authentication method for accessing an OCI API Gateway deployment?
- A. OAuth
- B. SAML Token
- C. API Key
- D. HTTP Basic
Answer: B
Explanation:
Explanation
OCI API Gateway supports the following authentication methods for accessing an API deployment3:
* HTTP Basic: The client sends a username and password with each request. The credentials are validated against a user database in Oracle Identity Cloud Service (IDCS).
* API Key: The client sends an API key with each request. The API key is validated against a list of keys stored in IDCS or OCI Vault.
* OAuth: The client obtains an access token from an authorization server (such as IDCS) and sends it with each request. The access token is validated against the authorization server and optionally checked for required scopes.
* JWT Token: The client obtains a JSON Web Token (JWT) from an identity provider (such as IDCS or OCI IAM) and sends it with each request. The JWT is validated against the identity provider's public key and optionally checked for required claims. SAML Token is not a valid authentication method for accessing an OCI API Gateway deployment. SAML is an XML-based standard for exchanging
* authentication and authorization data between different parties, such as a service provider and an identity provider4. SAML tokens are typically used for web browser single sign-on (SSO) scenarios, not for API access4.
NEW QUESTION # 62
You are a developing a microservices application that will be a consumer of the Oracle CloudInfrastructure (OCI) Streaming service. Which API method should you use to read and process a stream?
- A. GetStream
- B. ReadStream
- C. GetMessages
- D. ProcessStream
- E. ReadMessages
Answer: C
Explanation:
Explanation
The correct API method to read and process a stream in the Oracle Cloud Infrastructure (OCI) Streaming service is "GetMessages". When consuming messages from a stream in OCI Streaming, you use the
"GetMessages" API method. This method allows you to retrieve a batch of messages from the stream for processing. You can specify parameters such as the number of messages to retrieve, the maximum size of the messages, and the timeout for the request. By using the "GetMessages" API method, you can retrieve messages from the stream and then process them in your microservices application. This allows you to consume and handle the data in real-time as it becomes available in the stream. The "GetMessages" method provides flexibility in how you consume and process the messages, enabling you to implement custom logic and workflows based on your specific application requirements.
NEW QUESTION # 63
A company is developing a new application that needs to process transactions in real time. The company wants to ensure that all transactions are processed in order and that no transaction is lost. Which of these is a correct strategy for leveraging OCI Queue in this scenario?
- A. Use a separate queue for each type of transaction.
- B. Use a separate queue for each application instance.
- C. Use a single queue to process all transactions.
- D. Use a priority queue to prioritize requests.
Answer: C
Explanation:
Explanation
OCI Queue is a service for enabling asynchronous (decoupled) communication in a serverless manner3. Queue handles high-volume transactional data that requires independent processing without loss or duplication3. Queue supports ordering of messages within a queue by using the FIFO (first-in-first-out) delivery option3. Therefore, using a single queue to process all transactions ensures that all transactions are processed in order and that no transaction is lost.Verified References: Overview of Queue
NEW QUESTION # 64
You have been asked to update an OKE cluster to a network configuration that has the least attack surface while the deployed applications are still directly available for access from the Internet. Which is a valid OKE cluster network configuration that meets this requirement? (Choose the best answer.)
- A. Private subnets for nodes and the Kubemetes API endpoint; public subnets for load balancers
- B. Private subnet for the Kubemetes API endpoint; public subnets for nodes and load balancers
- C. Private subnets for nodes, the Kubemetes API endpoint, and load balancers
- D. Private subnets for nodes; public subnets for the Kubemetes API endpoint and load balancers
Answer: A
Explanation:
The valid OKE cluster network configuration that meets the requirement of having the least attack surface while still allowing direct access to the deployed applications from the Internet is: Private subnets for nodes and the Kubernetes API endpoint; public subnets for load balancers. By placing the nodes and the Kubernetes API endpoint in private subnets, they are not directly accessible from the Internet, reducing the attack surface. The load balancers, on the other hand, are placed in public subnets, allowing them to be accessed from the Internet and serve as the entry point for accessing the deployed applications. This configuration ensures that the critical components of the cluster, such as the nodes and the API endpoint, are protected within the private network, while still providing accessibility to the applications through the load balancers. It helps to enhance security by limiting direct access to the internal components of the cluster while maintaining the availability of the deployed applications.
NEW QUESTION # 65
Which of the following is defined as a configurable, low-latency infrastructure layer that controls the interaction between a network of microservices? (Choose the best answer.)
- A. Service Mesh
- B. Containers
- C. CI/CD Pipelines
- D. Kubernetes
- E. DevOps
Answer: A
Explanation:
The correct answer is "Service Mesh." A service mesh is a configurable, low-latency infrastructure layer that controls the interaction between a network of microservices. It provides functionalities such as service discovery, load balancing, traffic management, security, and observability for microservices-based applications. It is designed to improve communication and manage the complex interactions between services within a distributed system. Service mesh frameworks like Istio and Linkerd are commonly used to implement service mesh architecture.
NEW QUESTION # 66
Which "Action Type" option is NOT available in an Oracle Cloud Infrastructure (OCI) Events rule definition?
- A. Functions
- B. Streaming
- C. Notifications
- D. Email
Answer: D
Explanation:
An action is a response that you define for the rule to perform when the filter finds a matching event1. The action type specifies the service that you want to invoke by delivering the event message1. The following action types are available in OCI Events rule definition1:
Streaming: Send to a stream from Oracle Streaming Service.
Notifications: Send to an Oracle Notification Service topic.
Functions: Send to an Oracle Functions Service endpoint. Email is not a valid action type for OCI Events rule definition. To send an email as an action, you need to use the Notifications service and subscribe to a topic with an email protocol2.
NEW QUESTION # 67
(CHK_1>3) You have an e-commerce application that loads customers' transactional data into the Oracle Cloud Infrastructure (OCI) Streaming service. The data must now be extracted and transformed before sending it to a third-party REST endpoint. You have been directed to leverage the OCI Service Connector Hub to automate this process. Which configuration option would address this requirement?
- A. Configure a new service connector as follows: * Source: Streaming * Task: Functions * Target: Functions
- B. Configure a new service connector as follows: * Source: Streaming * Task: None * Target: Notifications
- C. Configure a new service connector as follows: * Source: Streaming * Task: API Gateway * Target: Notifications
- D. Configure a new service connector as follows: * Source: Streaming * Task: API Gateway * Target: Functions
- E. Configure a new service connector as follows: * Source: Streaming * Task: Functions * Target: API Gateway
Answer: B
Explanation:
To address the requirement of extracting and transforming data from the Oracle Cloud Infrastructure (OCI) Streaming service and sending it to a third-party REST endpoint using the OCI Service Connector Hub, the best configuration option is: Configure a new service connector as follows: * Source: Streaming * Task: None * Target: Notifications By selecting the Streaming service as the source, you can capture the transactional data from the stream. Since there is a need to transform and send the data to a third-party REST endpoint, you don't need to specify any specific task in the connector. The target is set to Notifications, which allows you to send the transformed data to an endpoint outside of the OCI environment. Notifications can be configured to deliver the data to various supported destinations, including HTTP endpoints, email addresses, and more. This configuration enables you to automate the process of extracting data from the streaming service and sending it to the desired third-party REST endpoint, fulfilling the requirement of extracting, transforming, and forwarding the data.
NEW QUESTION # 68
Which TWO statements are correct regarding Docker images and containers? (Choose two.)
- A. An image is a collection of immutable layers whereas a container is a running instance of an image.
- B. A container can exist without an image but an image cannot exist without a container.
- C. Writing and building a new Dockerfile is the only way you can create new Docker images.
- D. If multiple containers are spawned from the same image, then they all use the same copy of that image in memory.
- E. Only one container can be spawned from a given image at a time.
Answer: A,D
Explanation:
Which TWO statements are correct regarding Docker images and containers? (Choose two.) Writing and building a new Dockerfile is the only way you can create new Docker images. A container can exist without an image but an image cannot exist without a container. Only one container can be spawned from a given image at a time. If multiple containers are spawned from the same image, then they all use the same copy of that image in memory. (Correct) An image is a collection of immutable layers whereas a container is a running instance of an image. (Correct) ChatGPT The correct statements regarding Docker images and containers are: If multiple containers are spawned from the same image, then they all use the same copy of that image in memory. This statement is correct. When multiple containers are created from the same Docker image, they share the underlying layers of the image in memory. Each container has its own isolated filesystem and runtime environment, but they all use the same base image, which helps in efficient resource utilization. An image is a collection of immutable layers whereas a container is a running instance of an image. This statement is also correct. Docker images are composed of multiple layers, with each layer representing a specific change or addition to the previous layer. These layers are read-only and can be shared among multiple containers. On the other hand, a container is a lightweight and isolated runtime instance created from a specific image. It is a running process that has its own filesystem, network, and runtime configuration. The statements "Writing and building a new Dockerfile is the only way you can create new Docker images" and "A container can exist without an image but an image cannot exist without a container" are incorrect. Docker images can be created in various ways, including using Dockerfiles, importing from existing images, or pulling from registries. Additionally, a container requires an image to run, so an image must exist before a container can be created from it.
NEW QUESTION # 69
Which kubectl command syntax is valid for implementing a rolling update deployment strategy in Kubernetes? (Choose the best answer.)
- A. kubectl rolling-update <deployment-name> --image=image:v2
- B. kubectl upgrade -c <container> --image=image:v2
- C. kubectl update <deployment-name> --image=image:v2
- D. kubectl update -c <container> --iniage=image: v2
Answer: A
Explanation:
Explanation
The correct syntax for implementing a rolling update deployment strategy in Kubernetes using the kubectl command is: kubectl rolling-update <deployment-name> --image=image:v2 This command initiates a rolling update of the specified deployment by updating the container image to image:v2. The rolling update strategy ensures that the new version of the application is gradually deployed while maintaining availability and minimizing downtime.
NEW QUESTION # 70
What is the difference between blue/green and canary deployment strategies? (Choose the best answer.)
- A. In blue/green, the application Is deployed In minor Increments to a select group of people. In canary, both old and new applications are simultaneously in production.
- B. In blue/green, both old and new applications are in production at the same time. In canary, the application Is deployed incrementally to a select group of people.
- C. In blue/green, current applications are slowly replaced with new ones. In canary, both old and new applications are in production at the same time.
- D. In blue/green, current applications are slowly replaced with new ones. In canary, the application Is deployed Incrementally to a select group of people.
Answer: B
Explanation:
Explanation
The correct answer is: In blue/green deployment, both old and new applications are in production at the same time. In canary deployment, the application is deployed incrementally to a select group of people. In a blue/green deployment strategy, two identical environments, referred to as blue and green, are set up. The current production environment (blue) continues to serve live traffic while a new version of the application is deployed in the green environment. Once the new version is tested and deemed stable, traffic is routed from the blue environment to the green environment, making it the new production environment. This approach allows for a seamless switch between the old and new versions of the application. On the other hand, in a canary deployment strategy, the new version of the application is deployed incrementally to a small subset of users or a specific group. This allows for testing the new version in a real production environment while minimizing the impact of any potential issues. If the new version performs well and meets the desired criteria, it can be gradually rolled out to a larger audience or the entire user base. In summary, the main difference between blue/green and canary deployment strategies lies in how the deployment is managed. Blue/green involves simultaneous production of both old and new applications, while canary deployment focuses on incremental deployment to a select group of users.
NEW QUESTION # 71
You want to push a new image in the Oracle Cloud Infrastructure (OCI) Registry. Which TWO actions would you need to perform? (Choose two.)
- A. Generate an API signing key to complete the authentication via Docker CLI.
- B. Generate an auth token to complete the authentication via Docker CLI.
- C. Assign a tag via Docker CLI to the image.
- D. Generate an OCI tag namespace in your repository.
- E. Assign an OCI defined tag via OCI CLI to the image.
Answer: B,C
Explanation:
To push a new image to the Oracle Cloud Infrastructure (OCI) Registry, you would need to perform the following two actions: Assign a tag via Docker CLI to the image: Before pushing the image, you need to assign a tag to it using the Docker CLI. The tag helps identify the image and associate it with a specific version or label. Generate an auth token to complete the authentication via Docker CLI: To authenticate and authorize the push operation, you need to generate an auth token. This token is used to authenticate your Docker CLI with the OCI Registry, allowing you to push the image securely. Note: Generating an API signing key, assigning an OCI defined tag via OCI CLI, and generating an OCI tag namespace are not required steps for pushing a new image to the OCI Registry.
NEW QUESTION # 72
You are developing a distributed application and you need a call to a path to always return a specific JSON content deploy an OCI API Gateway with the below API deployment specification. What is the correct value for type? { "routes" : [{ "path" : "/hello", "methods" : ["Get"), "backend" : { "type" : " ---------------- ", "status": 200, "headers" : [{ "name" : "Content-Type", "value" : "application/json" }] "body" : "{\"myjson\":
\"consistent response\"}" }}]}
- A. STOCK_RESPONSE_BACKEND
- B. JSON_BACKEND
- C. CONSTANT_BACKEND
- D. HTTP_BACKEND
Answer: A
Explanation:
Explanation
The correct value for the "type" field in the API deployment specification is
"STOCK_RESPONSE_BACKEND". By setting the "type" to "STOCK_RESPONSE_BACKEND", you are indicating that the backend for the specified route should return a pre-defined response. This type of backend is commonly used when you want a specific response to be returned consistently, regardless of the actual backend service implementation. In this case, the API deployment specification is configured to have a single route with the path "/hello" and the method "GET". The backend section specifies the type as
"STOCK_RESPONSE_BACKEND". Additionally, it defines the response status code as 200, setsthe
"Content-Type" header to "application/json", and provides the JSON content in the "body" field. Using this configuration, any request to the "/hello" path with the "GET" method will always receive a consistent JSON response with the content "{"myjson": "consistent response"}".
NEW QUESTION # 73
Having created a Container Engine for Kubernetes (OKE) cluster, you can use Oracle Cloud Infrastructure (OCI) Logging to view and search the logs of applications running on the worker node compute instances in the cluster. Which task is NOT required to collect and parse applicationlogs? (Choose the best answer.)
- A. Create a dynamic group with a rule that includes all worker nodes In the cluster.
- B. Enable monitoring for all worker nodes in the cluster.
- C. Configure a custom log in OCI Logging with the appropriate agent configuration.
- D. Set the OCI Logging option to Enabled for the cluster.
Answer: B
Explanation:
Explanation
The correct answer is: Enable monitoring for all worker nodes in the cluster. Enabling monitoring for all worker nodes in the cluster is not required to collect and parse application logs using Oracle Cloud Infrastructure (OCI) Logging. Monitoring is a separate feature that allows you to collect metrics and monitor the health and performance of the worker nodes. To collect and parse application logs, you need to perform the following tasks: Set the OCI Logging option to Enabled for the cluster: This enables the OCI Logging service for the cluster. Create a dynamic group with a rule that includes all worker nodes in the cluster: This helps in targeting the logs generated by the worker nodes. Configure a custom log in OCI Logging with the appropriate agent configuration: This involves specifying the log source, log path, and log format to parse and collect the application logs. By completing these tasks, you can collect and parse the application logs generated by the applications running on the worker node compute instances in the OKE cluster.
NEW QUESTION # 74
Which TWO are required to access the Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) cluster from the kubectl CLI? (Choose two.)
- A. Tiller enabled on the OKE cluster.
- B. OCI Identity and Access Management (IAM) Auth Token.
- C. An SSH key pair with the public key added to the cluster worker nodes.
- D. Install and configure the OCI CLI.
- E. A configured OCI API signing key pair.
Answer: D,E
Explanation:
Explanation
The correct options are: A configured OCI API signing key pair: The API signing key pair is used for authentication and authorization to access OCI resources, including the OKE cluster. The private key should be configured on your local machine to authenticate API requests. An SSH key pair with the public key added to the cluster worker nodes: This is required for secure SSH access to the worker nodes in the OKE cluster.
You need to generate an SSH key pair and add the public key to the cluster's worker node pool during cluster creation or update. Therefore, the correct options are having a configured OCI API signing key pair and an SSH key pair with the public key added to the cluster worker nodes.
NEW QUESTION # 75
A Docker image consists of one or more layers, each of which represents a Dockerfile instruction. The layers are stacked and each one is a delta of the changes from the previous layer. What permission is associated with these layers?
- A. write only
- B. read mostly
- C. movable
- D. read only
- E. write once
Answer: D
Explanation:
Explanation
The correct answer is: "read only." The layers of a Docker image are read-only. Once a layer is created, it cannot be modified. Each layer represents a Dockerfile instruction, and it is stacked on top of the previous layer, forming a stack of immutable layers. These layers are designed to be read-only to ensure consistency and integrity of the image. When a Docker image is built, each instruction in the Dockerfile creates a new layer. Each layer represents the changes made by that instruction relative to the previous layer. The layers are stacked on top of each other to form the complete image. This layer-based approach allows for efficient storage and distribution of Docker images. Because the layers are read-only, any changes or modifications to the image result in the creation of new layers rather than modifying the existing ones. This immutability ensures that each layer remains intact and preserves the integrity of the image. It also enables Docker's caching mechanism, where previously built layers can be reused if the corresponding instructions haven't changed, speeding up the image build process. The other options mentioned, such as "write only," "write once,"
"movable," and "read mostly," do not accurately describe the permission associated with Docker image layers.
Docker image layers are specifically designed to be read-only.
NEW QUESTION # 76
......
Latest Verified & Correct 1z0-1084-23 Questions: https://passleader.free4dump.com/1z0-1084-23-real-dump.html