100%合格率保証付きで最高の1z0-1084-24試験でリアル問題PDFがある[2024年10月]
1z0-1084-24問題集で2024年最新のOracle 1z0-1084-24試験問題
Oracle 1z0-1084-24 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
| トピック 5 |
|
質問 # 27
Your organization is developing serverless applications with Oracle Functions. Many functions will need to store state data in a database, which will require using appropriate credentials. However, your corporate security standards mandate encryption of secret information, such as database passwords. How would you address this security requirement?
- A. Use the OCI Vault service to auto-encrypt the password and then set an application-level configuration variable to reference the auto-decrypted password inside your function container.
- B. Use OCI Console to enter the password in the function configuration section in the provided input field.
- C. Leverage application-level configuration variables to store passwords because they are automatically encrypted by Oracle Functions.
- D. Encrypt the password using the OCI Vault service and then decrypt this password in your function code with the generated key.
正解：D
解説：
The best way to store and use secret information, such as database passwords, in Oracle Functions is to use the OCI Vault service. The OCI Vault service provides encryption and decryption capabilities for sensitive data. You can use the OCI Vault service to encrypt the password and store it as an application-level configuration variable. Then, you can use the generated key to decrypt the password in your function code when you need to access the database. Verified References: Oracle Functions: Using Key Management To Encrypt And Decrypt Configuration Variables
質問 # 28
Which statement best describes the term "cloud native"?
- A. Cloud native refers to the design and deployment of applications that are optimized for cloud infrastructure.
- B. Cloud native refers to the process of migrating applications from on-premises infrastructure to the cloud.
- C. Cloud native refers to the use of cloud infrastructure to run traditional on-premises applications.
- D. Cloud native refers to the use of cloud-based development tools to build traditional on-premises applications.
正解：A
解説：
Cloud native is the software approach of building, deploying, and managing modern applications in cloud computing environments3. Cloud native apps are designed and built to exploit the scale, elasticity, resiliency, and flexibility the cloud provides4. Cloud native technologies support fast and frequent changes to applications without impacting service delivery, providing adopters with an innovative, competitive advantage3. Therefore, cloud native refers to the design and deployment of applications that are optimized for cloud infrastructure. Verified References: What is Cloud Native? - Everything you need to know, What is Cloud Native? | Microsoft Learn
質問 # 29
A developer has created another version of a microservice and wants 10% of the traffic to flow towards it for testing purposes. The application is already configured using OCI (Oracle Cloud Infrastructure) Service Mesh. Which of the following steps is the right approach to achieve this goal?
- A. Create a new Kubernetes deployment for the new version of the microservice and set the traffic splitting percentage to 10% in the Kubernetes service manifest.
- B. Use Kubernetes HPA (Horizontal Pod Autoscaler) to scale the new version of the microservice to handle 10% of the traffic automatically.
- C. Create a new entry in the routeRules field of the virtual service route table manifest to configure traffic splitting between the old and new versions of the microservice and set the percentage to 10%.
- D. Create a new entry in the routeRules field of the ingress gateway route table manifest to configure traffic splitting between the old and new versions of the microservice and set the percentage to 10%.
正解：C
質問 # 30
You need to push a new Docker container image to a repository in the Oracle Cloud Infrastructure (OCI) Registry. Which mechanism must you use to provide authentication?
- A. Generate an API signing key to complete the authentication via the Docker CLI.
- B. Generate an API signing key to complete the authentication via the OCI CLI.
- C. Generate an Auth Token to complete the authentication via the OCI CLI.
- D. Generate an Auth Token to complete the authentication via the Docker CLI.
正解：D
解説：
To push a new Docker container image to a repository in OCI Registry, you need to use an Auth Token to complete the authentication via the Docker CLI1. An Auth Token is a secure, auto-generated password that you can use to authenticate with OCI services such as OCI Registry1. You can generate an Auth Token in the Console by following these steps1:
* In the top-right corner of the Console, open the Profile menu and then click User settings to view the details.
* On the Auth Tokens page, click Generate Token.
* Enter a friendly description for the auth token. Avoid entering confidential information.
* Click Generate Token. The new auth token is displayed.
* Copy the auth token immediately to a secure location from where you can retrieve it later, because you won't see the auth token again in the Console.
* Close the Generate Token dialog. After generating an Auth Token, you need to log in to OCI Registry by entering docker login <region-key>.ocir.io in a terminal window on the client machine running Docker, where <region-key> corresponds to the key for the OCI Registry region you're using1. When prompted for a username, enter your username in the format <tenancy-namespace>/<username>, where
<tenancy-namespace> is the auto-generated Object Storage namespace string of your tenancy1. When prompted for a password, enter the Auth Token you copied earlier1.
質問 # 31
Which THREE are valid statements regarding the OCI Container Engine for Kubernetes (OKE) service?
(Choose three.)
- A. You must have access to an Oracle Cloud Infrastructure tenancy. Your tenancy must have sufficient quota on different types of resources.
- B. OKE cannot use existing network resources for the creation of a new cluster.
- C. There is a limit of three clusters within each region, but there is no limit on the number of nodes and pods you can create within each cluster.
- D. OKE automatically creates and configures new network resources for the new cluster.
正解：A、C、D
解説：
The valid statements regarding the OCI Container Engine for Kubernetes (OKE) service are: OKE automatically creates and configures new network resources for the new cluster. When creating a new OKE cluster, the service automatically provisions and configures the necessary network resources, such as VCNs, subnets, route tables, security lists, and load balancers, to support the cluster. Your tenancy must have sufficient quota on different types of resources. Before creating an OKE cluster, you need to ensure that your Oracle Cloud Infrastructure (OCI) tenancy has sufficient quota for the required resources, such as compute instances, block storage, networking resources, and load balancers. You must have access to an Oracle Cloud Infrastructure tenancy. To use the OKE service, you need to have access to an OCI tenancy. This means you must have a valid OCI account and the necessary permissions to create and manage resources within the tenancy. The following statements are not valid: OKE cannot use existing network resources for the creation of a new cluster. OKE creates new network resources specifically for the cluster, and it does not support using existing network resources. There is a limit of three clusters within each region, but there is no limit on the number of nodes and pods you can create within each cluster. This statement is incorrect. There is no specific limit on the number of clusters you can create within a region in OKE. However, there may be certain limits or quotas on resources that can impact the number of clusters you can create.
質問 # 32
Which option best defines microservices?
- A. A finely tuned piece of software that performs a single or small collection of tasks.
- B. A statically typed and compiled language.
- C. An organized collection of structured information or data, typically stored electronically in a computer system.
- D. An open-source system for automating deployment, scaling, and management of containerized applications.
正解：A
解説：
The correct answer is: "A finely tuned piece of software that performs a single or small collection of tasks." Microservices are a software architectural approach where a system is decomposed into small, independent services that are responsible for performing a specific set of tasks. Each microservice is designed to be focused, finely tuned, and highly cohesive, handling a single or a small collection of related tasks. This granularity allows for better scalability, maintainability, and flexibility in building complex applications. The other options provided do not accurately define microservices: An open-source system for automating deployment, scaling, and management of containerized applications refers to a container orchestration tool like Kubernetes, which can be used to manage microservices but is not a definition of microservices itself. A statically typed and compiled language describes a type of programming language characteristic and is not specific to the concept of microservices. An organized collection of structured information or data, typically stored electronically in a computer system is a definition of a database or data storage system and is unrelated to microservices.
質問 # 33
Which TWO statements are correct regarding Docker images and containers? (Choose two.)
- A. Only one container can be spawned from a given image at a time.
- B. A container can exist without an image but an image cannot exist without a container.
- C. Writing and building a new Dockerfile is the only way you can create new Docker images.
- D. If multiple containers are spawned from the same image, then they all use the same copy of that image in memory.
- E. An image is a collection of immutable layers whereas a container is a running instance of an image.
正解：D、E
解説：
Which TWO statements are correct regarding Docker images and containers? (Choose two.) Writing and building a new Dockerfile is the only way you can create new Docker images. A container can exist without an image but an image cannot exist without a container. Only one container can be spawned from a given image at a time. If multiple containers are spawned from the same image, then they all use the same copy of that image in memory. (Correct) An image is a collection of immutable layers whereas a container is a running instance of an image. (Correct) ChatGPT The correct statements regarding Docker images and containers are: If multiple containers are spawned from the same image, then they all use the same copy of that image in memory. This statement is correct. When multiple containers are created from the same Docker image, they share the underlying layers of the image in memory. Each container has its own isolated filesystem and runtime environment, but they all use the same base image, which helps in efficient resource utilization. An image is a collection of immutable layers whereas a container is a running instance of an image. This statement is also correct. Docker images are composed of multiple layers, with each layer representing a specific change or addition to the previous layer. These layers are read-only and can be shared among multiple containers. On the other hand, a container is a lightweight and isolated runtime instance created from a specific image. It is a running process that has its own filesystem, network, and runtime configuration. The statements "Writing and building a new Dockerfile is the only way you can create new Docker images" and "A container can exist without an image but an image cannot exist without a container" are incorrect. Docker images can be created in various ways, including using Dockerfiles, importing from existing images, or pulling from registries. Additionally, a container requires an image to run, so an image must exist before a container can be created from it.
質問 # 34
You have a containerized application that requires access to an Autonomous Transaction Processing (ATP) Database. Which option is NOT valid when the container is deployed in an OKE cluster? (Choose the best answer.)
- A. Create a Kubernetes secret with contents from the instance Wallet files. Use this secret to create a volume mounted to the appropriate path in the application deployment manifest.
- B. Install the Oracle Cloud Infrastructure Service Broker on the Kubernetes cluster and deploy ServiceInstance and ServiceBinding resources for ATP. Then use the specified binding name as a volume in the application deployment manifest.
- C. Enable Oracle REST Data Services for the required schemas and connect via HTTPS.
- D. Use Kubernetes secrets to configure environment variables on the container with ATP instance OCID, and OCI API credentials. Then use the CreateConnection API endpoint from the service runtime.
正解：B
解説：
The option that is not valid for connecting to an Autonomous Transaction Processing (ATP) Database from a container in Kubernetes is: Install the Oracle Cloud Infrastructure Service Broker on the Kubernetes cluster and deploy ServiceInstance and ServiceBinding resources for ATP. Then use the specified binding name as a volume in the application deployment manifest. The Oracle Cloud Infrastructure Service Broker is not used for connecting to an ATP Database from a container in Kubernetes. The Service Broker is used for provisioning and managing cloud services directly from Kubernetes. It allows you to create and manage instances of OCI services using Kubernetes resources like ServiceInstance and ServiceBinding. To connect to an ATP Database from a container in Kubernetes, you can use one of the following valid options: Enable Oracle REST Data Services for the required schemas and connect via HTTPS. This involves enabling and configuring Oracle REST Data Services (ORDS) for the schemas in the ATP Database. You can then connect to the ATP Database using RESTful endpoints provided by ORDS. Use Kubernetes secrets to configure environment variables on the container with ATP instance OCID and OCI API credentials. Then use the CreateConnection API endpoint from the service runtime. This approach involves configuring the necessary environment variables on the container to provide the ATP instance OCID and OCI API credentials. The application can then use the OCI SDK or REST API (such as the CreateConnection endpoint) to establish a connection to the ATP Database. Create a Kubernetes secret with contents from the instance Wallet files. Use this secret to create a volume mounted to the appropriate path in the application deployment manifest. This method involves creating a Kubernetes secret that contains the necessary credentials from the ATP Database's instance wallet files. The secret can then be mounted as a volume in the application deployment, allowing the application to access the required credentials for connecting to the ATP Database. Both options 1 and 3 provide valid approaches for connecting to an ATP Database from a container in Kubernetes, depending on the specific requirements and preferences of the application.
質問 # 35
Which of the following is defined as a configurable, low-latency infrastructure layer that controls the interaction between a network of microservices? (Choose the best answer.)
- A. Service Mesh
- B. CI/CD Pipelines
- C. Kubernetes
- D. Containers
- E. DevOps
正解：A
解説：
The correct answer is "Service Mesh." A service mesh is a configurable, low-latency infrastructure layer that controls the interaction between a network of microservices. It provides functionalities such as service discovery, load balancing, traffic management, security, and observability for microservices-based applications. It is designed to improve communication and manage the complex interactions between services within a distributed system. Service mesh frameworks like Istio and Linkerd are commonly used to implement service mesh architecture.
質問 # 36
Which open source engine is used by Oracle Cloud Infrastructure (OCI) to power Oracle Functions?
- A. Kubeless
- B. Apache OpenWhisk
- C. Knative
- D. Fn Project
正解：D
解説：
Fn Project is the open source engine that is used by OCI to power Oracle Functions1. Fn Project is an open source, container native, serverless platform that can be run anywhere - any cloud or on-premises1. Fn Project is easy to use, extensible, and performant. You can download and install the open source distribution of Fn Project, develop and test a function locally, and then use the same tooling to deploy that function to Oracle Functions1. Verified References: Overview of Functions
質問 # 37
Which technique is used for testing the entire user flow as well as the moving parts of a cloud native app, ensuring that there are no high-level discrepancies?
- A. Integration Testing
- B. Unit Testing
- C. Component Testing
- D. End-to-end Testing
- E. Contract Testing
正解：D
解説：
End-to-end testing is a technique that involves checking the entire user flow as well as the moving parts of a cloud native app, ensuring that there are no high-level discrepancies3. End-to-end testing simulates real user scenarios and validates the functionality, performance, reliability, and security of the app from start to finish3. End-to-end testing has several benefits, such as3:
* Comprehensive testing: You can test your app as a whole and verify that all the components work together as expected.
* User-centric testing: You can test your app from the user's perspective and ensure that it meets the user' s needs and expectations.
* Quality assurance: You can test your app in a realistic environment and identify any issues or defects before releasing it to the users.
質問 # 38
You have two microservices, A and B running in production. Service A relies on APIs from service B. You want to test changes to service A without deploying all of its dependencies, which includes service B. Which approach should you take to test service A?
- A. Test using a previous test version of service B.
- B. Test using an API mock of service B.
- C. This is not possible because service B is a dependency.
- D. Test using the current production version of service B.
正解：B
解説：
The correct answer is: Test using an API mock of service B. To test service A without deploying all of its dependencies, including service B, you can use an API mock of service B. An API mock is a simulated version of the API that mimics the behavior of the actual service. By using an API mock, you can isolate the testing of service A and simulate the responses and behavior of service B's APIs. With an API mock, you can define the expected responses and behavior of service B's APIs, allowing you to test the integration between service A and the mocked version of service B. This approach enables you to verify the functionality of service A without relying on the availability or changes in the actual service B. By decoupling the dependencies and using an API mock, you can perform independent testing of service A, ensuring its functionality in isolation.
質問 # 39
You are instructed to automate manual tasks and help software teams manage complex environments at scale using the Oracle Cloud Infrastructure (OCI) services. Which THREE OCI services can be leveraged to securely store and version your application's source code, and automate the building, testing, and deployment of applications to the OCI platform? (Choose three.)
- A. Oracle Cloud Logging Analytics
- B. Resource Manager
- C. Oracle APEX Application Development
- D. Container Engine for Kubernetes
- E. DevOps
- F. Oracle Cloud Infrastructure Registry
正解：D、E、F
解説：
The three OCI services that can be leveraged to securely store and version your application's source code, and automate the building, testing, and deployment of applications to the OCI platform are: DevOps: OCI provides a comprehensive set of DevOps services, including Oracle Developer Cloud Service, which allows you to manage source code repositories, automate builds and testing, and streamline the deployment process.
Container Engine for Kubernetes: OCI's Container Engine for Kubernetes (OKE) enables you to deploy and manage containerized applications using Kubernetes. It provides a scalable and reliable platform for automating the deployment of your applications. Oracle Cloud Infrastructure Registry: OCI Registry is a fully managed, private container registry that allows you to securely store and manage Docker images. It integrates with other OCI services, such as Container Engine for Kubernetes, to facilitate seamless deployment and orchestration of containerized applications. These services combined provide the necessary tools and infrastructure to support continuous integration and continuous deployment (CI/CD) workflows, enabling efficient and automated application development and deployment processes in the Oracle Cloud Infrastructure environment.
質問 # 40
What are the TWO main reasons you would choose to implement a serverless architecture? (Choose two.)
- A. Easier to run long-running operations
- B. Automatic horizontal scaling
- C. Improved in-function state management
- D. No need for integration testing
- E. Reduced operational cost
正解：B、E
解説：
The two main reasons to choose a serverless architecture are: Automatic horizontal scaling: Serverless architectures allow for automatic scaling of resources based on demand. The infrastructure automatically provisions and scales resources as needed, ensuring that applications can handle varying workloads efficiently. This eliminates the need for manual scaling and optimizes resource utilization. Reduced operational cost: Serverless architectures follow a pay-per-use model, where you are billed only for the actual execution time and resources consumed by your functions. This leads to cost savings as you don't have to pay for idle resources. Additionally, serverless architectures remove the need for managing and maintaining servers, reducing operational overhead and associated costs. Explanation: No need for integration testing:
Integration testing is still necessary in serverless architectures to ensure that functions integrate correctly with other components and services. Serverless functions can interact with various event sources, databases, and APIs, and testing is required to verify the integration points. Improved in-function state management:
Serverless architectures typically encourage stateless functions that operate on short-lived requests or events.
While there are mechanisms to manage state within a function, serverless architectures are designed to be stateless by default, promoting scalability and fault tolerance. Easier to run long-running operations:
Serverless functions are generally designed for short-lived operations rather than long-running tasks. If you have a requirement for long-running operations, a serverless architecture may not be the ideal choice, as it has execution time limits and may not provide the necessary resources for extended execution.
質問 # 41
As a Cloud Native developer, you have written a web service for your company. However, your security team has suggested that your web service should address Distributed Denial-of-Service (DDoS) attack. You are time-constrained and you need to ensure that this is implemented as soon as possible. What should you do in this scenario? (Choose the best answer.)
- A. Use the OCI Virtual Cloud Network (VCN) segregation to control DDoS.
- B. Use a third party service integration to Implement DDoS attack mitigation.
- C. Re-write your web service and implement rate limiting.
- D. Use the OCI API Gateway service and configure rate limiting.
正解：D
解説：
The correct answer in this scenario is to use the OCI API Gateway service and configure rate limiting. Using the OCI API Gateway service and configuring rate limiting is an effective approach to address Distributed Denial-of-Service (DDoS) attacks. By implementing rate limiting, you can control the number of requests that can be made to your web service within a specific time frame. This helps to prevent overload and ensures that your service can handle legitimate traffic while mitigating the impact of DDoS attacks. By leveraging the OCI API Gateway service, you can easily configure rate limiting rules to restrict the number of requests per second or per minute. This allows you to set appropriate thresholds and safeguard your web service from being overwhelmed by excessive requests. The API Gateway acts as a protective layer, filtering out malicious traffic and ensuring the smooth operation of your service. While options like OCI Virtual Cloud Network (VCN) segregation and third-party service integrations may contribute to overall security, they do not specifically address DDoS attacks as efficiently as rate limiting. VCN segregation focuses more on network segmentation and isolation, while third-party service integration may introduce additional dependencies and complexities.
Re-writing your web service and implementing rate limiting is a viable option, but it may not be feasible considering the time constraints mentioned. Leveraging the OCI API Gateway service provides a quicker and easier solution to implement DDoS attack mitigation through rate limiting.
質問 # 42
Which TWO are part of the Cloud Native Computing Foundation (CNCF) container runtime? (Choose two.)
- A. runc
- B. getcd
- C. rkt-o
- D. containerd
正解：A、D
解説：
The two components that are part of the Cloud Native Computing Foundation (CNCF) container runtime are:
containerd: containerd is an open-source container runtime that provides a runtime environment for containers, including managing container images, executing containers, and handling container lifecycle events. It is designed to be lightweight and extensible, providing the necessary functionality to run containers efficiently. runc: runc is a lightweight container runtime that serves as a reference implementation of the Open Container Initiative (OCI) runtime specification. It is responsible for launching and managing containers based on OCI specifications, including handling container isolation, namespaces, cgroups, and other low-level container operations. These two components, containerd and runc, are widely used in the container ecosystem and are part of the CNCF's efforts to promote and develop open-source technologies for cloud-native computing.
質問 # 43
Which testing strategy achieves high velocity of deployments and releases of cloud native applications?
(Choose the best answer.)
- A. Integration testing
- B. Automated testing
- C. A/B testing
- D. Penetration testing
正解：B
解説：
The testing strategy that achieves high velocity of deployments and releases of cloud native applications is
"Automated testing." Automated testing involves the use of automated tools and frameworks to execute tests, validate functionality, and detect issues or bugs in an application. By automating the testing process, developers and DevOps teams can rapidly test and validate code changes, ensuring that new features and updates are functioning correctly before being deployed to production. This approach helps increase the speed and efficiency of the testing process, allowing for faster and more frequent deployments of cloud native applications.
質問 # 44
You are building a cloud native serverless travel application with multiple Oracle Functions in Java, Python, and Node.js. You need to build and deploy these functions to a single application named travel-app. Which command will help you complete this task successfully?
- A. fn function deploy app travel-app--all
- B. fn deploy--app travel-app --all
- C. fn app --app travel-app deploy --ext java pyljs
- D. fn app deploy --app travel-app --all
正解：B
解説：
The correct answer is: fn deploy --app travel-app --all Explanation: To build and deploy multiple Oracle Functions as part of a single application named "travel-app," you can use the fn deploy command with the appropriate options. The command fn deploy --app travel-app --all is the correct syntax. Here's what each part of the command does: fn deploy: This command is used to deploy functions and applications in Oracle Functions. --app travel-app: This option specifies the application name as "travel-app," indicating that you want to deploy functions to this application. --all: This option indicates that you want to deploy all the functions within the application. By using fn deploy --app travel-app --all, you can build and deploy all the functions in your travel application across different programming languages (Java, Python, and Node.js) to the "travel-app" application in Oracle Functions.
質問 # 45
Which of the following TWO statements are TRUE about deleting a Kubernetes cluster? (Choose two.)
- A. Changing the auto-generated name of a worker node does not affect the deletion of the worker node when the cluster in which it is created is deleted.
- B. If you change the auto-generated name of a worker node and then delete the cluster, the renamed worker node is not deleted.
- C. You cannot change the autogenerated names of the worker nodes in the format oke-c<part-of cluster- CCID>-<part-of-node-pool-OCID>-<part-of-subnet-OCID>-<slot> within a Kubernetes cluster.
- D. Upon deleting a cluster, other resources created during the cluster creation process or associated with the cluster (such as VCNS, Internet Gateways, NAT Gateways, Route Tables, Security Lists, B. Load Balancers, and Block Volumes) are deleted automatically.
- E. Upon deleting a cluster, no other resources created during the cluster creation process or associated with the cluster (such as VCNS. Internet Gateways, NAT Gateways, Route Tables, Security Lists. Load Balancers, and Block Volumes) are deleted automatically.
正解：B、E
解説：
The correct statements about deleting a Kubernetes cluster are: If you change the auto-generated name of a worker node and then delete the cluster, the renamed worker node is not deleted. Changing the name of a worker node does not affect its deletion when the cluster is deleted. The cluster deletion process does not consider the renamed worker nodes and will delete all worker nodes associated with the cluster. Upon deleting a cluster, no other resources created during the cluster creation process or associated with the cluster (such as VCNs, Internet Gateways, NAT Gateways, Route Tables, Security Lists, Load Balancers, and Block Volumes) are deleted automatically. These additional resources are not automatically deleted when the cluster is deleted. You need to manage the deletion of these resources separately, if desired. Therefore, the correct statements are that the renamed worker nodes are not deleted when the cluster is deleted, and other associated resources are not automatically deleted when the cluster is deleted.
質問 # 46
......
無料1z0-1084-24別格な問題集をダウンロード：https://www.passtest.jp/Oracle/1z0-1084-24-shiken.html
1z0-1084-24合格保証がつく問題集で合格できる1z0-1084-24試験：https://drive.google.com/open?id=1KGNRRPOwLX8ymCNEtY8OzHjiuURY1Dg4