Online 1Z0-1084-25 Practice Test

Question 1

Your organization has deployed their e-commerce application on Oracle Container Engine for Kubernetes (OKE) and they are using the Oracle Cloud Infrastructure Registry (OCIR) service as their Docker image repository. They have deployed the OKE cluster using the 'custom create' option, and their Virtual Cloud Network (VCN) has three public subnets with associated Route Tables, Security Lists, and Internet Gateway. However, their application containers are failing to deploy. On investigation, they discover that the images are not being pulled from the designated OCIR repository, even though the YAML configuration has the correct path to the images. What is a valid concern here that needs to be further investigated?

Options :

A : Security List rule for TCP port 22 needs to be added to connect to the OCIR service.

B : VCN hosting the OKE cluster worker nodes needs to have a NAT gateway to access OCIR repositories.

C : Identity and Access Management (IAM) credentials need to be added for each user that deploys applications to the OKE cluster

D : OKE cluster needs to have a secret with the credentials of their OCIR repository and use that secret in the Kubernetes deployment manifest.

Answer: D

Question 2

As a Cloud Native developer, you develop two services in Node.js and deploy them to two different Container Engine for Kubernetes (OKE) clusters that use the same Virtual Cloud Network (VCN). Your security team wants to analyze the network communication between them. How can this requirement be met in the most cost-effective way?

Options :

A : Rewrite the application and send the application logs to an outside log aggregator.

B : Deploy a third-party logging service and aggregate the network flow logs.

C : Use the OCI Logging service and enable VCN flow logs.

D : Deploy Wireshark and intercept the packets.

Answer: C

Question 3

Which of the following TWO statements are TRUE about deleting a Kubernetes cluster? (Choose two.)

Options :

A : Upon deleting a cluster, other resources created during the cluster creation process or associated with the cluster (such as VCNS, Internet Gateways, NAT Gateways, Route Tables, Security Lists,B.Load Balancers, and Block Volumes) are deleted automatically.

B : If you change the auto-generated name of a worker node and then delete the cluster, the renamed worker node is not deleted

C : Upon deleting a cluster, no other resources created during the cluster creation process or associated with the cluster (such as VCNS. Internet Gateways, NAT Gateways, Route Tables, Security Lists. Load Balancers, and Block Volumes) are deleted automatically.

D : Changing the auto-generated name of a worker node does not affect the deletion of the worker node when the cluster in which it is created is deleted.

E : You cannot change the autogenerated names of the worker nodes in the format oke-c< part-of clusterCCID >-< part-of-node-pool-OCID >-< part-of-subnet-OCID >-< slot > within a Kubernetes cluster.

Answer: B,C

Question 4

You are deploying an API via Oracle Cloud Infrastructure (OCI) API Gateway and you want to implement request policies to control access Which is NOT available in OCI API Gateway?

Options :

A : Limiting the number of requests sent to backend services

B : Enabling CORS (Cross-Origin Resource Sharing) support

C : Providing authentication and authorization

D : Controlling access to OCI resources

Answer: D

Question 5

You have been asked to update an OKE cluster to a network configuration that has the least attack surface while the deployed applications are still directly available for access from the Internet. Which is a valid OKE cluster network configuration that meets this requirement? (Choose the best answer.)

Options :

A : Private subnets for nodes, the Kubemetes API endpoint, and load balancers

B : Private subnets for nodes; public subnets for the Kubemetes API endpoint and load balancers

C : Private subnets for nodes and the Kubemetes API endpoint; public subnets for load balancers

D : Private subnet for the Kubemetes API endpoint; public subnets for nodes and load balancers

Answer: C

EXPERTY DESIGNED 1Z0-1084-25 PRACTICE TEST