Question 1

Which open source engine is used by Oracle Cloud Infrastructure (OCI) to power Oracle Functions?

Options :

A : Apache OpenWhisk

B : OpenFaaS

C : Fn Project

D : Knative

Answer: C

Question 2

You are developing a serverless application with Oracle Functions and Oracle Cloud Infrastructure Object

Storage- Your function needs to read a JSON file object from an Object Storage bucket named"input-bucket"

in compartment "qa-compartment". Your corporate security standards mandate the use of Resource Principals

for this use case.

Which two statements are needed to implement this use case

Options :

A :

Set up a policy with the following statement to grant read access to the bucket:

allow dynamic-group read-file-dg to read objects in compartment qa-compartment where target .bucket

.name=' input-bucket *<\/div>

B :

Set up the following dynamic group for your function-s OCID: Name: read-file-dg

Rule: resource. id = ' ocid1. f nf unc. ocl -phx. aaaaaaaakeaobctakezj z5i4uj j 7g25q7sx5mvr55pms6f

4da !

C :

Set up a policy to grant all functions read access to the bucket:

allow all functions in compartment qa-compartment to read objects in target.bucket.name='input-bucket'

D :

Set up a policy to grant your user account read access to the bucket:

allow user XYZ to read objects in compartment qa-compartment where target .bucket,

name-'input-bucket'

E : No policies are needed. By default, every function has read access to Object Storage buckets in the tenancy

Answer: A,B

Question 3

You developed a microservices-based application that runs in an Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) cluster. It has multiple endpoints that need to be exposed to the public internet. What is the most cost-effective way to expose multiple application endpoints without adding unnecessary complexity to the application?

Options :

A : Use a NodePort service type in Kubernetes for each of your service endpoints using the node-s public IP address to access the applications.

B : Create a separate load balancer instance for each service using the lowest 100 Mbps option.

C : Use a ClusterIP service type in Kubernetes for each of your service endpoints using a load balancer to expose the endpoints

D : Deploy an Ingress Controller and use it to expose each endpoint with its own routing endpoint.

Answer: D

Question 4

A leading insurancefirm is hosting its customer portal in Oracle Cloud Infrastructure (OCI) Container Engine

for Kubernetes with an OCI Autonomous

Database. Their support team discovered a lot of SQL injection attempts and cross-site scripting attacks to the

portal, which isstarting to affect the production environment.

What should they implement to mitigate this attack?

Options :

A : Network Security Lists

B : Network Security Groups

C : Network Security Firewall

D : Web Application Firewall

Answer: D

Question 5

You have been asked to create a stateful application deployed in Oracle Cloud Infrastructure (OCI) Container

Engine for Kubernetes (OKE) that requires all ofyour worker nodes to mount and write data to persistent

volumes.

Which two OCI storage services should you use?

Options :

A : Use OCI File Services as persistent volume.

B : Use GlusterFS as persistent volume.

C : Use OCI Block Volume backed persistent volume.

D : Use open source storage solutions on top of OCI.

E : Use OCI Object Storage as persistent volume.

Answer: A,C

Higher Test Marks with Free Online 1Z0-1084-25 Exam Practice

Buying Options: