最近更新された2024年05月テストエンジン練習テストは1z0-1084-23試験問題解答！
Oracle Cloud Infrastructure 2023 Developer Professional認定サンプル問題と練習試験合格させます
質問 # 35
Which of these is NOT a valid authentication method for accessing an OCI API Gateway deployment?
- A. API Key
- B. SAML Token
- C. OAuth
- D. HTTP Basic
正解：B
解説：
OCI API Gateway supports the following authentication methods for accessing an API deployment3:
HTTP Basic: The client sends a username and password with each request. The credentials are validated against a user database in Oracle Identity Cloud Service (IDCS).
API Key: The client sends an API key with each request. The API key is validated against a list of keys stored in IDCS or OCI Vault.
OAuth: The client obtains an access token from an authorization server (such as IDCS) and sends it with each request. The access token is validated against the authorization server and optionally checked for required scopes.
JWT Token: The client obtains a JSON Web Token (JWT) from an identity provider (such as IDCS or OCI IAM) and sends it with each request. The JWT is validated against the identity provider's public key and optionally checked for required claims. SAML Token is not a valid authentication method for accessing an OCI API Gateway deployment. SAML is an XML-based standard for exchanging authentication and authorization data between different parties, such as a service provider and an identity provider4. SAML tokens are typically used for web browser single sign-on (SSO) scenarios, not for API access4.
質問 # 36
Which TWO are required to access the Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) cluster from the kubectl CLI? (Choose two.)
- A. Install and configure the OCI CLI.
- B. An SSH key pair with the public key added to the cluster worker nodes.
- C. A configured OCI API signing key pair.
- D. Tiller enabled on the OKE cluster.
- E. OCI Identity and Access Management (IAM) Auth Token.
正解：A、C
解説：
Explanation
The correct options are: A configured OCI API signing key pair: The API signing key pair is used for authentication and authorization to access OCI resources, including the OKE cluster. The private key should be configured on your local machine to authenticate API requests. An SSH key pair with the public key added to the cluster worker nodes: This is required for secure SSH access to the worker nodes in the OKE cluster.
You need to generate an SSH key pair and add the public key to the cluster's worker node pool during cluster creation or update. Therefore, the correct options are having a configured OCI API signing key pair and an SSH key pair with the public key added to the cluster worker nodes.
質問 # 37
You are developing a polyglot serverless application using Oracle Functions. Which language cannot be used to write your function code?
- A. Node.js
- B. PL/SQL
- C. Go
- D. Python
- E. Java
正解：B
解説：
Explanation
Oracle Functions does not currently support PL/SQL as a language for writing function code. PL/SQL is a procedural language used in Oracle Database for developing stored procedures, triggers, and other database-related code. However, Oracle Functions supports several other popular programming languages such as Go, Node.js, Python, and Java, allowing developers to choose the language that best suits their application requirements and their familiarity with the language. While PL/SQL is powerful for working with the Oracle Database, it is not an option for writing function code in the Oracle Functions serverless architecture.
質問 # 38
(CHK_4>2) You have a scenario where a DevOps team wants to store secrets in Oracle Cloud Infrastructure (OCI) Vault so that it can inject the secrets into an app's environment variables (for example, MYSQL_DB_PASSWD) at deployment time. Which is NOT valid about managing secrets in the OCI Vault service?
- A. A secret reuse rule prevents the use of secret contents across different versions of a secret.
- B. You can manually create new secrets as well as new secret versions using the OCI Console:
- C. A unique OCID is automatically generated for each secret and remains unchanged even when creating a new secret version.
- D. New secret versions automatically expire in 90 days unless you configure an expiry rule.
正解：C
解説：
Explanation
The correct answer is: "A unique OCID is automatically generated for each secret and remains unchanged even when creating a new secret version." The statement that is NOT valid about managing secrets in the OCI Vault service is: "A unique OCID is automatically generated for each secret and remains unchanged even when creating a new secret version." In OCI Vault, a secret is identified by its OCID (Oracle Cloud Identifier), which is a unique identifier for each resource inOracle Cloud Infrastructure. However, when a new secret version is created for an existing secret, the OCID remains the same for the secret itself, but a new OCID is generated for the secret version. This allows you to track and manage different versions of a secret while maintaining a consistent OCID for the secret itself. The other statements mentioned are valid: You can manually create new secrets as well as new secret versions using the OCI Console. This means you have control over creating and managing secrets within the Vault service. A secret reuse rule prevents the use of secret contents across different versions of a secret. This ensures that each secret version maintains its own unique set of contents and avoids accidental reuse or sharing of secrets across versions. By default, new secret versions automatically expire in 90 days unless you configure an expiry rule. This helps enforce good security practices by automatically rotating secrets periodically, reducing the risk of unauthorized access in case of compromise. Therefore, the statement that is NOT valid is the one regarding the uniqueness and consistency of the OCID when creating new secret versions.
質問 # 39
To enforce mutual TLS (mTLS) authentication for clients of your microservices, your team has chosen to leverage the Oracle Cloud Infrastructure (OCI) API Gateway service to create new API Deployments that will direct requests to your microservices. Which is NOT valid regarding the mTLS options in OCI API Gateway?
- A. Custom CA or custom CA bundles can be added to your gateway's trust store ONLY if they already exist in the OCI Certificates service.
- B. The mTLS request policy can only be enabled at the API deployment specification level, which then applies globally to ALL routes in that deployment.
- C. Once the mTLS request policy is enabled, ALL requests with valid certificates are routed to the backend unless you have defined one or more particular values (such as a domain name).
- D. Adding a custom certificate authority (CA) or custom CA bundle to your gateway's trust store for mTLS is optional unless you need to reject certificates that do not contain particular values (such as a domain name).
正解：D
解説：
The correct answer is: "Adding a custom certificate authority (CA) or custom CA bundle to your gateway's trust store for mTLS is optional unless you need to reject certificates that do not contain particular values (such as a domain name)." The statement that is NOT valid regarding the mTLS options in OCI API Gateway is: "Adding a custom certificate authority (CA) or custom CA bundle to your gateway's trust store for mTLS is optional unless you need to reject certificates that do not contain particular values (such as a domain name)." In OCI API Gateway, adding a custom certificate authority (CA) or custom CA bundle to the gateway's trust store is not optional. It is a necessary step when configuring mTLS authentication. The trust store in the gateway is used to validate the client certificates presented during mTLS authentication. The other options listed are valid regarding the mTLS options in OCI API Gateway: Once the mTLS request policy is enabled, all requests with valid certificates are routed to the backend unless specific values (such as a domain name) are defined. This means that only requests with valid client certificates will be allowed to access the backend microservices. The mTLS request policy can only be enabled at the API deployment specification level, and it applies globally to all routes in that deployment. This ensures consistent mTLS authentication across all routes and endpoints in the API deployment. Custom CA or custom CA bundles can be added to the gateway's trust store, but only if they already exist in the OCI Certificates service. This allows you to include trusted CAs or CA bundles to validate client certificates during mTLS authentication.
質問 # 40
As a developer, you have been tasked with implementing a microservices-based application. Which THREE technologies are best suited to accomplish the task? (Choose three.)
- A. Big Data
- B. Terraform
- C. Service Mesh
- D. Docker
- E. Anomaly Detection
- F. Kubemetes
正解：C、D、F
解説：
The three technologies best suited for implementing a microservices-based application are: Service Mesh: A service mesh is a dedicated infrastructure layer that provides features like service discovery, load balancing, encryption, authentication, and observability for microservices. It helps in managing the communication and interactions between microservices in a scalable and secure manner. Kubernetes: Kubernetes is an open-source container orchestration platform that enables the deployment, scaling, and management of containerized applications. It provides features like automated scaling, service discovery, load balancing, and self-healing capabilities, which are essential for managing microservices in a distributed environment. Docker: Docker is a popular containerization platform that allows packaging applications and their dependencies into lightweight containers. It provides a consistent and portable environment for running microservices, enabling easy deployment and scalability. Docker also facilitates isolation and resource efficiency, making it an ideal choice for deploying microservices. While Big Data, Anomaly Detection, and Terraform are valuable technologies, they are not specifically focused on enabling the implementation of microservices-based applications.
質問 # 41
(CHK_1>3) You have an e-commerce application that loads customers' transactional data into the Oracle Cloud Infrastructure (OCI) Streaming service. The data must now be extracted and transformed before sending it to a third-party REST endpoint. You have been directed to leverage the OCI Service Connector Hub to automate this process. Which configuration option would address this requirement?
- A. Configure a new service connector as follows: * Source: Streaming * Task: Functions * Target: API Gateway
- B. Configure a new service connector as follows: * Source: Streaming * Task: API Gateway * Target:
Notifications - C. Configure a new service connector as follows: * Source: Streaming * Task: None * Target: Notifications
- D. Configure a new service connector as follows: * Source: Streaming * Task: Functions * Target:
Functions - E. Configure a new service connector as follows: * Source: Streaming * Task: API Gateway * Target:Functions
正解：C
解説：
Explanation
To address the requirement of extracting and transforming data from the Oracle Cloud Infrastructure (OCI) Streaming service and sending it to a third-party REST endpoint using the OCI Service Connector Hub, the best configuration option is: Configure a new service connector as follows: * Source: Streaming * Task: None * Target: Notifications By selecting the Streaming service as the source, you can capture the transactional data from the stream. Since there is a need to transform and send the data to a third-party REST endpoint, you don't need to specify any specific task in the connector. The target is set to Notifications, which allows you to send the transformed data to an endpoint outside of the OCI environment. Notifications can be configured to deliver the data to various supported destinations, including HTTP endpoints, email addresses, and more. This configuration enables you to automate the process of extracting data from the streaming service and sending it to the desired third-party REST endpoint, fulfilling the requirement of extracting, transforming, and forwarding the data.
質問 # 42
What is the open source engine for Oracle Functions?
- A. Knative
- B. OpenFaas
- C. Fn Project
- D. Apache OpenWhisk
正解：C
解説：
Explanation
The Fn Project is an open source serverless computing platform that serves as the engine for Oracle Functions.
It provides a runtime environment for executing functions in a serverless architecture. The Fn Project enables developers to build and deploy functions using different programming languages, including Java, Python, Node.js, and more. The Fn Project is designed to be flexible and extensible, allowing developers to define functions as small units of code and execute them in response to events or triggers. It supports event-driven execution, allowing functions to be triggered by various events such as HTTP requests, messages from messaging systems, or changes in data. Oracle Functions leverages the Fn Project as its underlying engine, providing a managed serverless platform within the Oracle Cloud Infrastructure. It allows developers to easily develop, deploy, and manage functions using the familiar Fn Project framework and tooling. With Oracle Functions, developers can focus on writing their function code while leaving the infrastructure management, scaling, and operational tasks to the platform.
質問 # 43
Which of the following is defined as a configurable, low-latency infrastructure layer that controls the interaction between a network of microservices? (Choose the best answer.)
- A. Service Mesh
- B. Containers
- C. DevOps
- D. Kubernetes
- E. CI/CD Pipelines
正解：A
解説：
The correct answer is "Service Mesh." A service mesh is a configurable, low-latency infrastructure layer that controls the interaction between a network of microservices. It provides functionalities such as service discovery, load balancing, traffic management, security, and observability for microservices-based applications. It is designed to improve communication and manage the complex interactions between services within a distributed system. Service mesh frameworks like Istio and Linkerd are commonly used to implement service mesh architecture.
質問 # 44
As a cloud-native developer, you are designing an application that depends on Oracle Cloud Infrastructure (OCI) Object Storage wherever the application is running. Therefore, provisioning of storage buckets should be part of your Kubernetes deployment process for the application. Which of the following should you leverage to meet this requirement? (Choose the best answer.)
- A. Oracle Functions
- B. Open Service Broker API
- C. OCI Container Engine for Kubernetes
- D. OCI Service Broker for Kubernetes
正解：D
解説：
To provision storage buckets as part of your Kubernetes deployment process for an application that depends on Oracle Cloud Infrastructure (OCI) Object Storage, you should leverage the OCI Service Broker for Kubernetes. OCI Service Broker for Kubernetes enables you to provision and manage OCI resources, including Object Storage buckets, directly from Kubernetes. It provides a Kubernetes-native experience for managing OCI services, allowing you to define and manage OCI resources as part of your application deployment process. By using the OCI Service Broker for Kubernetes, you can define the required Object Storage buckets in your Kubernetes manifests, and the service broker will handle the provisioning and management of those buckets in OCI, ensuring that they are available for your application wherever it is running.
質問 # 45
You are developing a real-time monitoring application for a fleet of vehicles, which will be deployed on Oracle Cloud Infrastructure (OCI). You need to choose between using OCI Queue or OCI Streaming to handle the real-time data feeds from the vehicles. Based on the scenario described, which is the most appropriate choice for handling real-time data feeds?
- A. OCI Streaming, because it is designed for high-volume, continuous ingestion and processing of data, making it the best choice for a fleet of vehicles
- B. OCI Queue, because it is optimized for low-latency messaging and ideal for real-time applications
- C. OCI Queue, because it provides at-least-once message delivery, which is critical for real-time monitoring applications
- D. OCI Streaming, because it offers exactly-once message delivery, which is necessary for real-time applications
正解：A
解説：
Explanation
OCI Streaming is a fully managed, scalable, and durable messaging solution for ingesting continuous, high-volume streams of data that you can consume and process in real-time1. Streaming is suitable for any use case in which data is produced and processed continually and sequentially in a publish-subscribe messaging model1. Streaming can handle millions of messages per second with low latency2. Therefore, OCI Streaming is the most appropriate choice for handling real-time data feeds from a fleet of vehicles.Verified References: Overview of Streaming, Container Engine for Kubernetes
質問 # 46
You have two microservices, A and B running in production. Service A relies on APIs from service B. You want to test changes to service A without deploying all of its dependencies, which includes service B. Which approach should you take to test service A?
- A. Test using a previous test version of service B.
- B. Test using the current production version of service B.
- C. This is not possible because service B is a dependency.
- D. Test using an API mock of service
正解：D
解説：
Explanation
The correct answer is: Test using an API mock of service B. To test service A without deploying all of its dependencies, including service B, you can use an API mock of service B. An API mock is a simulated version of the API that mimics the behavior of the actual service. By using an API mock, you can isolate the testing of service A and simulate the responses and behavior of service B's APIs. With an API mock, you can define the expected responses and behavior of service B's APIs, allowing you to test the integration between service A and the mocked version of service B. This approach enables you to verify the functionality of service A without relying on the availability or changes in the actual service B. By decoupling the dependencies and using an API mock, you can perform independent testing of service A, ensuring its functionality in isolation.
質問 # 47
Which concept in OCI Queue is responsible for hiding a message from other consumers for a predefined amount of time after it has been delivered to a consumer?
- A. Maximum retention period
- B. Visibility timeout
- C. Polling timeout
- D. Delivery count
正解：B
解説：
Explanation
Visibility timeout is the concept in OCI Queue that is responsible for hiding a message from other consumers for a predefined amount of time after it has been delivered to a consumer1. The visibility timeout can be set at the queue level when creating a queue, or it can be specified when consuming or updating messages1. If a consumer is having difficulty successfully processing a message, it can update the message to extend its invisibility1. If a message's visibility timeout is not extended, and the consumer does not delete the message, it returns to the queue1.Verified References: Overview of Queue
質問 # 48
Which "Action Type" option is NOT available in an Oracle Cloud Infrastructure (OCI) Events rule definition?
- A. Streaming
- B. Functions
- C. Email
- D. Notifications
正解：C
解説：
An action is a response that you define for the rule to perform when the filter finds a matching event1. The action type specifies the service that you want to invoke by delivering the event message1. The following action types are available in OCI Events rule definition1:
Streaming: Send to a stream from Oracle Streaming Service.
Notifications: Send to an Oracle Notification Service topic.
Functions: Send to an Oracle Functions Service endpoint. Email is not a valid action type for OCI Events rule definition. To send an email as an action, you need to use the Notifications service and subscribe to a topic with an email protocol2.
質問 # 49
In the DevOps lifecycle, what is the difference between continuous delivery and continuous deployment? (Choose two.)
- A. Continuous delivery utilizes automatic deployment to a development environment, while continuous deployment involves automatic deployment to a production environment.
- B. Continuous delivery is a process that initiates deployment manually, while continuous deployment is based on automating the deployment process.
- C. Continuous delivery involves automation of developer tasks, while continuous deployment involves manual operational tasks.
- D. Continuous delivery requires more automatic linting, while continuous deployment testing must be run manually.
正解：A、B
解説：
The two correct differences between continuous delivery and continuous deployment in the DevOps lifecycle are: Continuous delivery is a process that initiates deployment manually, while continuous deployment is based on automating the deployment process. In continuous delivery, the software is ready for deployment, but the decision to deploy is made manually by a human. On the other hand, continuous deployment automates the deployment process, and once the software passes all the necessary tests and quality checks, it is automatically deployed without human intervention. Continuous delivery involves automatic deployment to a development environment, while continuous deployment involves automatic deployment to a production environment. In continuous delivery, the software is automatically deployed to a development or staging environment for further testing and validation. However, the actual deployment to the production environment is performed manually. In continuous deployment, the software is automatically deployed to the production environment, eliminating the need for manual intervention in the deployment process. These differences highlight the level of automation and human involvement in the deployment process between continuous delivery and continuous deployment approaches in the DevOps lifecycle.
質問 # 50
A developer has created another version of a microservice and wants 10% of the traffic to flow towards it for testing purposes. The application is already configured using OCI (Oracle Cloud Infrastructure) Service Mesh.
Which of the following steps is the right approach to achieve this goal?
- A. Create a new entry in the routeRules field of the ingress gateway route table manifest to configure traffic splitting between the old and new versions of the microservice and set the percentage to 10%.
- B. Use Kubernetes HPA (Horizontal Pod Autoscaler) to scale the new version of the microservice to handle
10% of the traffic automatically. - C. Create a new entry in the routeRules field of the virtual service route table manifest to configure traffic splitting between the old and new versions of the microservice and set the percentage to 10%.
- D. Create a new Kubernetes deployment for the new version of the microservice and set the trafficsplitting percentage to 10% in the Kubernetes service manifest.
正解：C
質問 # 51
......
Oracle 1z0-1084-23 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
| トピック 5 |
|
認定問題集でOracle Cloud 1z0-1084-23ガイドで100%有効な：https://www.passtest.jp/Oracle/1z0-1084-23-shiken.html
100%必ず合格させる1z0-1084-23一発合格はこれ：https://drive.google.com/open?id=1HnBPy_1UHHMb469hh-P_fbYQpe9bBgso