2023年最新の実際に出る無料Oracle 1z0-1084-23試験問題集と解答
1z0-1084-23練習テストエンジンで今すぐ試そう100試験問題
Oracle 1z0-1084-23 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
| トピック 5 |
|
| トピック 6 |
|
| トピック 7 |
|
質問 # 55
Kubernetes includes various elements such as compute, network, and storage. Compute is essentially CPU (units) and memory (bytes). Within an OKE cluster, what is considered to be the smallest unit of deployment with respect to compute?
- A. Deployment resource
- B. Container
- C. Pod
- D. Namespace
- E. Service
正解：C
解説：
A pod is the smallest and simplest unit in the Kubernetes object model that you create or deploy2. A pod represents a single instance of a running process in your cluster. Pods contain one or more containers, such as Docker containers. When you create a pod, you define how much CPU and memory (RAM) each container needs. A pod can also include storage volumes, IP addresses, options that govern how the container(s) should run, and more2. Pods are the basic building blocks of larger Kubernetes constructs such as deployments, replica sets, and services2.
質問 # 56
Which TWO statements are correct regarding Docker images and containers? (Choose two.)
- A. Writing and building a new Dockerfile is the only way you can create new Docker images.
- B. An image is a collection of immutable layers whereas a container is a running instance of an image.
- C. A container can exist without an image but an image cannot exist without a container.
- D. Only one container can be spawned from a given image at a time.
- E. If multiple containers are spawned from the same image, then they all use the same copy of that image in memory.
正解：B、E
解説：
Which TWO statements are correct regarding Docker images and containers? (Choose two.) Writing and building a new Dockerfile is the only way you can create new Docker images. A container can exist without an image but an image cannot exist without a container. Only one container can be spawned from a given image at a time. If multiple containers are spawned from the same image, then they all use the same copy of that image in memory. (Correct) An image is a collection of immutable layers whereas a container is a running instance of an image. (Correct) ChatGPT The correct statements regarding Docker images and containers are: If multiple containers are spawned from the same image, then they all use the same copy of that image in memory. This statement is correct. When multiple containers are created from the same Docker image, they share the underlying layers of the image in memory. Each container has its own isolated filesystem and runtime environment, but they all use the same base image, which helps in efficient resource utilization. An image is a collection of immutable layers whereas a container is a running instance of an image. This statement is also correct. Docker images are composed of multiple layers, with each layer representing a specific change or addition to the previous layer. These layers are read-only and can be shared among multiple containers. On the other hand, a container is a lightweight and isolated runtime instance created from a specific image. It is a running process that has its own filesystem, network, and runtime configuration. The statements "Writing and building a new Dockerfile is the only way you can create new Docker images" and "A container can exist without an image but an image cannot exist without a container" are incorrect. Docker images can be created in various ways, including using Dockerfiles, importing from existing images, or pulling from registries. Additionally, a container requires an image to run, so an image must exist before a container can be created from it.
質問 # 57
To enforce mutual TLS (mTLS) authentication for clients of your microservices, your team has chosen to leverage the Oracle Cloud Infrastructure (OCI) API Gateway service to create new API Deployments that will direct requests to your microservices. Which is NOT valid regarding the mTLS options in OCI API Gateway?
- A. Adding a custom certificate authority (CA) or custom CA bundle to your gateway's trust store for mTLS is optional unless you need to reject certificates that do not contain particular values (such as a domain name).
- B. Custom CA or custom CA bundles can be added to your gateway's trust store ONLY if they already exist in the OCI Certificates service.
- C. The mTLS request policy can only be enabled at the API deployment specification level, which then applies globally to ALL routes in that deployment.
- D. Once the mTLS request policy is enabled, ALL requests with valid certificates are routed to the backend unless you have defined one or more particular values (such as a domain name).
正解：A
解説：
The correct answer is: "Adding a custom certificate authority (CA) or custom CA bundle to your gateway's trust store for mTLS is optional unless you need to reject certificates that do not contain particular values (such as a domain name)." The statement that is NOT valid regarding the mTLS options in OCI API Gateway is: "Adding a custom certificate authority (CA) or custom CA bundle to your gateway's trust store for mTLS is optional unless you need to reject certificates that do not contain particular values (such as a domain name)." In OCI API Gateway, adding a custom certificate authority (CA) or custom CA bundle to the gateway's trust store is not optional. It is a necessary step when configuring mTLS authentication. The trust store in the gateway is used to validate the client certificates presented during mTLS authentication. The other options listed are valid regarding the mTLS options in OCI API Gateway: Once the mTLS request policy is enabled, all requests with valid certificates are routed to the backend unless specific values (such as a domain name) are defined. This means that only requests with valid client certificates will be allowed to access the backend microservices. The mTLS request policy can only be enabled at the API deployment specification level, and it applies globally to all routes in that deployment. This ensures consistent mTLS authentication across all routes and endpoints in the API deployment. Custom CA or custom CA bundles can be added to the gateway's trust store, but only if they already exist in the OCI Certificates service. This allows you to include trusted CAs or CA bundles to validate client certificates during mTLS authentication.
質問 # 58
A Docker image consists of one or more layers, each of which represents a Dockerfile instruction. The layers are stacked and each one is a delta of the changes from the previous layer. What permission is associated with these layers?
- A. write once
- B. read only
- C. write only
- D. movable
- E. read mostly
正解：B
解説：
The correct answer is: "read only." The layers of a Docker image are read-only. Once a layer is created, it cannot be modified. Each layer represents a Dockerfile instruction, and it is stacked on top of the previous layer, forming a stack of immutable layers. These layers are designed to be read-only to ensure consistency and integrity of the image. When a Docker image is built, each instruction in the Dockerfile creates a new layer. Each layer represents the changes made by that instruction relative to the previous layer. The layers are stacked on top of each other to form the complete image. This layer-based approach allows for efficient storage and distribution of Docker images. Because the layers are read-only, any changes or modifications to the image result in the creation of new layers rather than modifying the existing ones. This immutability ensures that each layer remains intact and preserves the integrity of the image. It also enables Docker's caching mechanism, where previously built layers can be reused if the corresponding instructions haven't changed, speeding up the image build process. The other options mentioned, such as "write only," "write once," "movable," and "read mostly," do not accurately describe the permission associated with Docker image layers. Docker image layers are specifically designed to be read-only.
質問 # 59
You need to push a new Docker container image to a repository in the Oracle Cloud Infrastructure (OCI) Registry. Which mechanism must you use to provide authentication?
- A. Generate an API signing key to complete the authentication via the OCI CLI.
- B. Generate an API signing key to complete the authentication via the Docker CLI.
- C. Generate an Auth Token to complete the authentication via the Docker CLI.
- D. Generate an Auth Token to complete the authentication via the OCI CLI.
正解：C
解説：
Explanation
To push a new Docker container image to a repository in OCI Registry, you need to use an Auth Token to complete the authentication via the Docker CLI1. An Auth Token is a secure, auto-generated password that you can use to authenticate with OCI services such as OCI Registry1. You can generate an Auth Token in the Console by following these steps1:
* In the top-right corner of the Console, open the Profile menu and then click User settings to view the details.
* On the Auth Tokens page, click Generate Token.
* Enter a friendly description for the auth token. Avoid entering confidential information.
* Click Generate Token. The new auth token is displayed.
* Copy the auth token immediately to a secure location from where you can retrieve it later, because you
* won't see the auth token again in the Console.
* Close the Generate Token dialog. After generating an Auth Token, you need to log in to OCI Registry by entering docker login <region-key>.ocir.io in a terminal window on the client machine running Docker, where <region-key> corresponds to the key for the OCI Registry region you're using1. When prompted for a username, enter your username in the format <tenancy-namespace>/<username>, where
<tenancy-namespace> is the auto-generated Object Storage namespace string of your tenancy1. When prompted for a password, enter the Auth Token you copied earlier1.
質問 # 60
A DevOps engineer is troubleshooting the Meshifyd application, which is running in an Oracle Cloud Infrastructure (OCI) environment. The engineer has set up the OCI Logging service to store access logs for the application but notices that the logs from the Meshifyd application are not showing up in the logging service.
The engineer suspects that there might be an issue with the logging configuration. Which two statements are potential reasons for logs from the Meshifyd application not showing up in the OCI Logging service?
- A. The logconfig.json file has incorrect or missing information in the application namespace in the paths field.
- B. The logconfig.json file has incorrect or missing OCID for the custom log group in the logGroupObjectId field.
- C. The logconfig.json file has incorrect or missing OCID for the custom log in the logobjectId field.
- D. The logconfig.json file has incorrect or missing information in the application namespace in the src field.
- E. The OCI Logging service is set up to pre access logs by creating a log group and custom log within the same compartment.
正解：B、C
解説：
Explanation
The logconfig.json file is a configuration file that specifies how the Unified Monitoring Agent collects and uploads custom logs to the OCI Logging service2. The logconfig.json file contains an array of objects, each representing a custom log configuration2. Each custom log configuration object has the following fields2:
* logGroupObjectId: The OCID of the log group where the custom log is stored.
* logObjectId: The OCID of the custom log.
* paths: An array of paths to files or directories containing the custom logs.
* src: A regular expression that matches the files containing the custom logs.
* parser: A parser definition that specifies how to parse the custom logs. If the logconfig.json file has incorrect or missing OCID for the custom log in the logobjectId field, or incorrect or missing OCID for the custom log group in the logGroupObjectId field, then the Unified Monitoring Agent will not be able to upload the custom logs to the OCI Logging service2. Therefore, these are potential reasons for logs from the Meshifyd application not showing up in the OCI Logging service. Verified References: Unified Monitoring Agent Configuration File
質問 # 61
Which technique is used for testing the entire user flow as well as the moving parts of a cloud native app, ensuring that there are no high-level discrepancies?
- A. Component Testing
- B. End-to-end Testing
- C. Contract Testing
- D. Integration Testing
- E. Unit Testing
正解：B
解説：
Explanation
End-to-end testing is a technique that involves checking the entire user flow as well as the moving parts of a cloud native app, ensuring that there are no high-level discrepancies3. End-to-end testing simulates real user scenarios and validates the functionality, performance, reliability, and security of the app from start to finish3. End-to-end testing has several benefits, such as3:
* Comprehensive testing: You can test your app as a whole and verify that all the components work together as expected.
* User-centric testing: You can test your app from the user's perspective and ensure that it meets the user's needs and expectations.
* Quality assurance: You can test your app in a realistic environment and identify any issues or defects before releasing it to the users.
質問 # 62
You are building a container image and pushing it to Oracle Cloud Infrastructure Registry (OCIR). You need to ensure that these images never get deleted from the repository. Which action should you take?
- A. Write a policy to limit access to the specific repository in your compartment.
- B. Edit the tenancy global retention policy.
- C. Create a group and assign a policy to perform lifecycle operations on images.
- D. Set global policy of image retention to "Retain All Images".
正解：D
解説：
The correct answer is: "Edit the tenancy global retention policy." To ensure that container images never get deleted from the Oracle Cloud Infrastructure Registry (OCIR), you should edit the tenancy global retention policy. The tenancy global retention policy is a setting that determines the retention behavior for all the images in the OCIR across the entire tenancy. By editing this policy, you can define the retention behavior that suits your requirements. To edit the tenancy global retention policy, you would typically perform the following steps: Access the Oracle Cloud Infrastructure Console and navigate to the OCIR service. Go to the "Policies" section or "Settings" section in the OCIR service. Locate the tenancy global retention policy settings. Modify the retention policy to specify the desired retention behavior. In this case, you would set the policy to retain all images, ensuring they are never deleted from the repository. By setting the global policy of image retention to "Retain All Images," you can ensure that the container images in your OCIR repository are permanently retained and not subject to deletion based on any default or automatic retention rules. The other options mentioned are not directly related to ensuring that container images are never deleted from the repository: Creating a group and assigning a policy to perform lifecycle operations on images or writing a policy to limit access to the specific repository in your compartment are access control measures and do not address the retention of images. Setting the global policy of image retention to "Retain All Images" is the correct action to achieve the desired outcome of preventing image deletion from the repository.
質問 # 63
Which one of the following is NOT a valid backend-type supported by Oracle Cloud Infrastructure (OCI) API Gateway?
- A. ORACLE_STREAMS_BACKEND
- B. HTTP BACKEND
- C. ORACLE_FUNCTIONS_BACKEND
- D. STOCK_RESPONSE_BACKEND
正解：A
解説：
Explanation
Oracle Cloud Infrastructure (OCI) API Gateway supports various backend-types to handle incoming requests and route them to the appropriate backend service. However, "ORACLE_STREAMS_BACKEND" is not a valid backend-type in OCI API Gateway. "STOCK_RESPONSE_BACKEND" is a valid backend-type that allows you to configure static responses directly in the API Gateway without routing requests to any specific backend service. This can be useful for handling simple requests or returning predefined responses. "HTTP BACKEND" is another valid backend-type that enables routing requests to an HTTP backend service.
"ORACLE_FUNCTIONS_BACKEND" is a valid backend-type that allows you to route requests to Oracle Functions, which are serverless functions that can be used to execute specific logic or operations. However,
"ORACLE_STREAMS_BACKEND" is not a valid backend-type in OCI API Gateway. The API Gateway does not have native support for Oracle Streams as a backend service. Oracle Streams is a feature of Oracle Database that provides a publish-subscribe mechanism for data replication and distribution within an Oracle Database environment. It is not directly integrated as a backend service in OCI API Gateway.
質問 # 64
Which "Action Type" option is NOT available in an Oracle Cloud Infrastructure (OCI) Events rule definition?
- A. Email
- B. Streaming
- C. Notifications
- D. Functions
正解：A
解説：
An action is a response that you define for the rule to perform when the filter finds a matching event1. The action type specifies the service that you want to invoke by delivering the event message1. The following action types are available in OCI Events rule definition1:
Streaming: Send to a stream from Oracle Streaming Service.
Notifications: Send to an Oracle Notification Service topic.
Functions: Send to an Oracle Functions Service endpoint. Email is not a valid action type for OCI Events rule definition. To send an email as an action, you need to use the Notifications service and subscribe to a topic with an email protocol2.
質問 # 65
You are instructed to automate manual tasks and help software teams manage complex environments at scale using the Oracle Cloud Infrastructure (OCI) services. Which THREE OCI services can be leveraged to securely store and version your application's source code, and automate the building, testing, and deployment of applications to the OCI platform? (Choose three.)
- A. Oracle APEX Application Development
- B. Oracle Cloud Logging Analytics
- C. Container Engine for Kubernetes
- D. DevOps
- E. Resource Manager
- F. Oracle Cloud Infrastructure Registry
正解：C、D、F
解説：
Explanation
The three OCI services that can be leveraged to securely store and version your application's source code, and automate the building, testing, and deployment of applications to the OCI platform are: DevOps: OCI provides a comprehensive set of DevOps services, including Oracle Developer Cloud Service, which allows you to manage source code repositories, automate builds and testing, and streamline the deployment process.
Container Engine for Kubernetes: OCI's Container Engine for Kubernetes (OKE) enables you to deploy and manage containerized applications using Kubernetes. It provides a scalable and reliable platform for automating the deployment of your applications. Oracle Cloud Infrastructure Registry: OCI Registry is a fully managed, private container registry that allows you to securely store and manage Docker images. It integrates with other OCI services, such as Container Engine for Kubernetes, to facilitate seamless deployment and orchestration of containerized applications. These services combined provide the necessary tools and infrastructure to support continuous integration and continuous deployment (CI/CD) workflows, enabling efficient and automated application development and deployment processes in the Oracle Cloud Infrastructure environment.
質問 # 66
You deployed a Python application to an Oracle Container Engine for Kubernetes (OKE) cluster. However, while testing you found a bug, which you rectified and then created a new Docker image. You now need to ensure that if this new image does not work once deployed, you should be able to roll back to the previous version. Using kubect1, which strategy should you use?
- A. Blue/Green Deployment
- B. A/B Testing
- C. Rolling Update
- D. Canary Deployment
正解：C
解説：
A rolling update is a deployment strategy that gradually replaces the old version of an application with the new version without any downtime4. OKE supports rolling updates by using the kubectl rollout command4. A rolling update allows you to roll back to the previous version if something goes wrong with the new version4. Therefore, using a rolling update strategy with kubectl ensures that you can roll back to the previous version of your Python application if the new image does not work once deployed. Verified Reference: Deploy Oracle Container Engine for Kubernetes
質問 # 67
Which statement best describes the term "cloud native"?
- A. Cloud native refers to the use of cloud-based development tools to build traditional on-premises applications.
- B. Cloud native refers to the process of migrating applications from on-premises infrastructure to the cloud.
- C. Cloud native refers to the use of cloud infrastructure to run traditional on-premises applications.
- D. Cloud native refers to the design and deployment of applications that are optimized for cloud infrastructure.
正解：D
解説：
Cloud native is the software approach of building, deploying, and managing modern applications in cloud computing environments3. Cloud native apps are designed and built to exploit the scale, elasticity, resiliency, and flexibility the cloud provides4. Cloud native technologies support fast and frequent changes to applications without impacting service delivery, providing adopters with an innovative, competitive advantage3. Therefore, cloud native refers to the design and deployment of applications that are optimized for cloud infrastructure. Verified Reference: What is Cloud Native? - Everything you need to know, What is Cloud Native? | Microsoft Learn
質問 # 68
What is the open source engine for Oracle Functions?
- A. Apache OpenWhisk
- B. OpenFaas
- C. Fn Project
- D. Knative
正解：C
解説：
Explanation
The Fn Project is an open source serverless computing platform that serves as the engine for Oracle Functions.
It provides a runtime environment for executing functions in a serverless architecture. The Fn Project enables developers to build and deploy functions using different programming languages, including Java, Python, Node.js, and more. The Fn Project is designed to be flexible and extensible, allowing developers to define functions as small units of code and execute them in response to events or triggers. It supports event-driven execution, allowing functions to be triggered by various events such as HTTP requests, messages from messaging systems, or changes in data. Oracle Functions leverages the Fn Project as its underlying engine, providing a managed serverless platform within the Oracle Cloud Infrastructure. It allows developers to easily develop, deploy, and manage functions using the familiar Fn Project framework and tooling. With Oracle Functions, developers can focus on writing their function code while leaving the infrastructure management, scaling, and operational tasks to the platform.
質問 # 69
You are developing a polyglot serverless application using Oracle Functions. Which language cannot be used to write your function code?
- A. Go
- B. Node.js
- C. Java
- D. PL/SQL
- E. Python
正解：D
解説：
Oracle Functions does not currently support PL/SQL as a language for writing function code. PL/SQL is a procedural language used in Oracle Database for developing stored procedures, triggers, and other database-related code. However, Oracle Functions supports several other popular programming languages such as Go, Node.js, Python, and Java, allowing developers to choose the language that best suits their application requirements and their familiarity with the language. While PL/SQL is powerful for working with the Oracle Database, it is not an option for writing function code in the Oracle Functions serverless architecture.
質問 # 70
Which option best defines microservices?
- A. A statically typed and compiled language.
- B. An organized collection of structured information or data, typically stored electronically in a computer system.
- C. An open-source system for automating deployment, scaling, and management of containerized applications.
- D. A finely tuned piece of software that performs a single or small collection of tasks.
正解：D
解説：
The correct answer is: "A finely tuned piece of software that performs a single or small collection of tasks." Microservices are a software architectural approach where a system is decomposed into small, independent services that are responsible for performing a specific set of tasks. Each microservice is designed to be focused, finely tuned, and highly cohesive, handling a single or a small collection of related tasks. This granularity allows for better scalability, maintainability, and flexibility in building complex applications. The other options provided do not accurately define microservices: An open-source system for automating deployment, scaling, and management of containerized applications refers to a container orchestration tool like Kubernetes, which can be used to manage microservices but is not a definition of microservices itself. A statically typed and compiled language describes a type of programming language characteristic and is not specific to the concept of microservices. An organized collection of structured information or data, typically stored electronically in a computer system is a definition of a database or data storage system and is unrelated to microservices.
質問 # 71
Which of these is NOT a valid authentication method for accessing an OCI API Gateway deployment?
- A. SAML Token
- B. OAuth
- C. HTTP Basic
- D. API Key
正解：A
解説：
Explanation
OCI API Gateway supports the following authentication methods for accessing an API deployment3:
* HTTP Basic: The client sends a username and password with each request. The credentials are validated against a user database in Oracle Identity Cloud Service (IDCS).
* API Key: The client sends an API key with each request. The API key is validated against a list of keys stored in IDCS or OCI Vault.
* OAuth: The client obtains an access token from an authorization server (such as IDCS) and sends it with each request. The access token is validated against the authorization server and optionally checked for required scopes.
* JWT Token: The client obtains a JSON Web Token (JWT) from an identity provider (such as IDCS or OCI IAM) and sends it with each request. The JWT is validated against the identity provider's public key and optionally checked for required claims. SAML Token is not a valid authentication method for accessing an OCI API Gateway deployment. SAML is an XML-based standard for exchanging
* authentication and authorization data between different parties, such as a service provider and an identity provider4. SAML tokens are typically used for web browser single sign-on (SSO) scenarios, not for API access4.
質問 # 72
What are the TWO main reasons you would choose to implement a serverless architecture? (Choose two.)
- A. Automatic horizontal scaling
- B. Reduced operational cost
- C. Improved in-function state management
- D. Easier to run long-running operations
- E. No need for integration testing
正解：A、B
解説：
The two main reasons to choose a serverless architecture are: Automatic horizontal scaling: Serverless architectures allow for automatic scaling of resources based on demand. The infrastructure automatically provisions and scales resources as needed, ensuring that applications can handle varying workloads efficiently. This eliminates the need for manual scaling and optimizes resource utilization. Reduced operational cost: Serverless architectures follow a pay-per-use model, where you are billed only for the actual execution time and resources consumed by your functions. This leads to cost savings as you don't have to pay for idle resources. Additionally, serverless architectures remove the need for managing and maintaining servers, reducing operational overhead and associated costs. No need for integration testing: Integration testing is still necessary in serverless architectures to ensure that functions integrate correctly with other components and services. Serverless functions can interact with various event sources, databases, and APIs, and testing is required to verify the integration points. Improved in-function state management: Serverless architectures typically encourage stateless functions that operate on short-lived requests or events. While there are mechanisms to manage state within a function, serverless architectures are designed to be stateless by default, promoting scalability and fault tolerance. Easier to run long-running operations: Serverless functions are generally designed for short-lived operations rather than long-running tasks. If you have a requirement for long-running operations, a serverless architecture may not be the ideal choice, as it has execution time limits and may not provide the necessary resources for extended execution.
質問 # 73
You deployed a Python application to an Oracle Container Engine for Kubernetes (OKE) cluster. However, while testing you found a bug, which you rectified and then created a new Docker image. You now need to ensure that if this new image does not work once deployed, you should be able to roll back to the previous version. Using kubect1, which strategy should you use?
- A. Blue/Green Deployment
- B. A/B Testing
- C. Rolling Update
- D. Canary Deployment
正解：C
解説：
Explanation
A rolling update is a deployment strategy that gradually replaces the old version of an application with the new version without any downtime4. OKE supports rolling updates by using the kubectl rollout command4. A rolling update allows you to roll back to the previous version if something goes wrong with the new version4.
Therefore, using a rolling update strategy with kubectl ensures that you can roll back to the previous version of your Python application if the new image does not work once deployed.Verified References: Deploy Oracle Container Engine for Kubernetes
質問 # 74
Which "Action Type" option is NOT available in an Oracle Cloud Infrastructure (OCI) Events rule definition?
- A. Email
- B. Streaming
- C. Notifications
- D. Functions
正解：A
解説：
Explanation
An action is a response that you define for the rule to perform when the filter finds a matching event1. The action type specifies the service that you want to invoke by delivering the event message1. The following action types are available in OCI Events rule definition1:
* Streaming: Send to a stream from Oracle Streaming Service.
* Notifications: Send to an Oracle Notification Service topic.
* Functions: Send to an Oracle Functions Service endpoint. Email is not a valid action type for OCI Events rule definition. To send an email as an action, you need to use the Notifications service and subscribe to a topic with an email protocol2.
質問 # 75
A developer has created another version of a microservice and wants 10% of the traffic to flow towards it for testing purposes. The application is already configured using OCI (Oracle Cloud Infrastructure) Service Mesh. Which of the following steps is the right approach to achieve this goal?
- A. Create a new entry in the routeRules field of the ingress gateway route table manifest to configure traffic splitting between the old and new versions of the microservice and set the percentage to 10%.
- B. Use Kubernetes HPA (Horizontal Pod Autoscaler) to scale the new version of the microservice to handle 10% of the traffic automatically.
- C. Create a new entry in the routeRules field of the virtual service route table manifest to configure traffic splitting between the old and new versions of the microservice and set the percentage to 10%.
- D. Create a new Kubernetes deployment for the new version of the microservice and set the traffic splitting percentage to 10% in the Kubernetes service manifest.
正解：C
質問 # 76
Which of the following step is NOT required for setting up the Container Engine for Kubernetes (OKE) cluster access using a local installation of kubectl?
- A. Generate an API signing key pair (if you do not already have one) and upload the public key of the API signing key pair.
- B. Generate Auth token from the OCI console to access the OKE cluster using kubectl.
- C. Install and configure the Oracle Cloud Infrastructure (OCI) CLI.
- D. Set up the kubeconfig file.
正解：B
解説：
The step that is NOT required for setting up the Container Engine for Kubernetes (OKE) cluster access using a local installation of kubectl is to generate an Auth token from the OCI console. The authentication for accessing the OKE cluster using kubectl can be performed using the OCI CLI configuration, specifically the API signing key pair and the kubeconfig file. Here are the correct steps for setting up the OKE cluster access using a local installation of kubectl: Set up the kubeconfig file: The kubeconfig file contains the necessary information to authenticate and access the OKE cluster using kubectl. It includes details such as the cluster endpoint, authentication method, and credentials. Generate an API signing key pair (if you do not already have one) and upload the public key of the API signing key pair: The API signing key pair is used for authentication with the OCI services. The public key of the key pair needs to be uploaded to the OCI Console to associate it with your user account. Install and configure the Oracle Cloud Infrastructure (OCI) CLI: The OCI CLI provides a command-line interface to interact with the OCI services. It needs to be installed and configured with your OCI credentials, including the user's OCID, tenancy OCID, region, and the path to the API signing key pair. By completing these steps, you can configure kubectl to access and manage your OKE clusters from your local machine using the OCI CLI authentication configuration.
質問 # 77
......
試験合格保証付きのOracle Cloud 1z0-1084-23試験問題集：https://www.passtest.jp/Oracle/1z0-1084-23-shiken.html
Oracle 1z0-1084-23日常練習試験は2023年最新のに更新された100問あります：https://drive.google.com/open?id=1HnBPy_1UHHMb469hh-P_fbYQpe9bBgso