Online 1Z0-1109-25 Practice Test

Question 1

As a DevOps engineer, you are tasked with implementing a DevSecOps approach in your organization. Which two statements best describe the goal of DevSecOps?

Options :

A : Prioritize the functional requirements of the application over security.

B : Find and fix security issues early in the software development process.

C : Codify security as part of the larger goal structure of DevOps.

D : Frame security as an individual responsibility of the security team alone.

E : Create applications that are faster and more efficient without regard for security concerns.

Answer: B,C

Question 2

A company has an Oracle Cloud Infrastructure (OCI) DevOps deployment pipeline set up in US East (us-ashburn 1) region, but they want to deploy an application in Japan Central (ap-osaka-1). How can they deploy their application in the ap-osaka-1 region with the deployment pipeline set up in the us ashburn-1 region in the most efficient manner?

Options :

A : It is not possible to use the same deployment pipeline across regions.

B : Deploy application in us-ashburn-1 and duplicate the same in ap-osaka-1.

C : Deploy directly in ap-osaka-1 from the us-ashburn-1 deployment pipeline.

D : Create another deployment pipeline in ap-osaka-1 to connect to the deployment pipeline in us ashburn-1

Answer: C

Question 3

As a startup planning to set up your infrastructure on Oracle Cloud Infrastructure (OCI), you must understand the key concepts of OCI Resource Manager. Which best describes a stack in Resource Manager that will assist you to manage infrastructure using the infrastructure-as-code model?

Options :

A : It is a group of related resources used to create lightweight and reusable abstractions, so that you can describe your infrastructure in terms of its architecture.

B : It is the difference between the real-world state of your infrastructure and the last executed Terraform configuration.

C : It represents a request to take a Terraform action on a state. It performs the actions that are defined in the configuration file.

D : It represents a collection of OCI resources created in the Compartment and includes a collection of Terraform files that specify the resources you want to manage with the Resource Manager

Answer: D

Question 4

As a developer working on the Oracle Cloud Infrastructure (OCI) DevOps service, you are creating a build spec yaml file to be used in the build pipeline. Which two actions are part of the proper creation of the file? (Choose two.)

Options :

A : Enter the details for binaries used in later pipeline stages into the outputArtifacts section.

B :

Enter the variables you would like to use in later build steps into the localVariables section.

C : Enter the vault secrets needed for the deployment pipeline into the exportedVariables section.

D :

Enter the necessary vault secret variable OCIDS into the vaultVariables section.

E :

Enter the artifacts the build pipeline should permanently save into the storeArtifacts section.

Answer: A,D

Question 5

Your customer has deployed their microservices based application on Oracle Container Engine for Kubernetes (OKE) and they are using Oracle Cloud Infrastructure Registry (OCIR) service as their Docker image repository. They have deployed the OKE cluster using the 'custom create' option, and their Virtual Cloud Network (VCN) has three public subnets with associated route tables, security lists, and an internet gateway. They are facing an issue where their application containers are falling to deploy. Upon investigation, they learn that the images are not getting pulled from the designated OCIR repository. The YAML configuration has the correct path to the images. What is a valid concern that needs to be further investigated?

Options :

A : They need to add a security list rule for TCP port 22 to connect to the OCIR service.

B : The VCN hosting the OKE cluster worker nodes needs to have a NAT gateway to access OCIR repositories.

C : They need to add IAM credentials for each user that deploys applications to the OKE cluster.

D : The OKE cluster needs to have a secret with credentials of their OCIR repository and use that secret in the Kubernetes deployment manifest.

Answer: D

EXPERTY DESIGNED 1Z0-1109-25 PRACTICE TEST