1Z0-1084-21 Online Practice Questions and Answers

Correct Answer: C

# Require the container to run without root privileges.

rule: 'MustRunAsNonRoot'

Reference: https://kubernetes.io/docs/concepts/policy/pod-security-policy/

Correct Answer: D

Specifying Alternative Load Balancer Shapes The shape of an Oracle Cloud Infrastructure load balancer specifies its maximum total bandwidth (that is, ingress plus egress). By default, load balancers are created with a shape of 100Mbps. Other shapes are available, including 400Mbps and 8000Mbps. https://docs.cloud.oracle.com/en-us/iaas/Content/ContEng/Tasks/contengcreatingloadbalancer.htm

Correct Answer: A

microservice is larger and can do more than a function. A function is a relatively small bit of code that performs only one action in response to an event. In many cases, microservices can be decomposed into a number of smaller stateless functions. The difference between microservices and functions is not simply the size. Functions are stateless, and they require no knowledge about or configuration of the underlying server--hence, the term serverless. https://developer.oracle.com/java/fn-project-introduction.html

Correct Answer: C

You can invoke a function that you've deployed to Oracle Functions in different ways:

Using the Fn Project CLI.

Using the Oracle Cloud Infrastructure CLI.

Using the Oracle Cloud Infrastructure SDKs.

Making a signed HTTP request to the function's invoke endpoint. Every function has an invoke endpoint.

Each of the above invokes the function via requests to the API. Any request to the API must be

authenticated by including a signature and the OCID of the compartment to which the function belongs in

the request header. Such a request is referred to as a 'signed' request. The signature includes Oracle

Cloud Infrastructure credentials in an encrypted form.

Correct Answer: A

CAP THEOREM

"CONSISTENCY, AVAILABILITY and PARTITION TOLERANCE are the features that we want in our

distributed system together"

Of three properties of shared-data systems (Consistency, Availability and tolerance to network Partitions)

only two can be achieved at any given moment in time.

Correct Answer: A

https://blogs.oracle.com/cloud-infrastructure/introducing-service-broker-for-kubernetes OCI Service Broker for Kubernetes is an implementation of the Open Service Broker API. OCI Service Broker for Kubernetes is specifically for interacting with Oracle Cloud Infrastructure services from Kubernetes clusters. It includes three service broker adapters to bind to the following Oracle Cloud Infrastructure services: Object Storage Autonomous Transaction Processing Autonomous Data Warehouse

Correct Answer: C

Token-based authentication for the CLI allows customers to authenticate their session interactively, then

use the CLI for a single session without an API signing key. This enables customers using an identity

provider that is not SCIM- supported to use a federated user account with the CLI and SDKs.

Starting a Token-based CLI Session

To use token-based authentication for the CLI on a computer with a web browser:

In the CLI, run the following command. This will launch a web browser.

oci session authenticate

In the browser, enter your user credentials. This authentication information is saved to the .config file.

Correct Answer: A

The minimum amount of persistent storage that a PVC can request is 50 gigabytes. If the request is for less than 50 gigabytes, the request is rounded up to 50 gigabytes. https://docs.cloud.oracle.com/en-us/iaas/Content/ContEng/Tasks/ contengcreatingpersistentvolumeclaim.htm

Correct Answer: C

Invoking a function returns a FunctionInvokeSubnetNotAvailable message and a 502 error (due to a DHCP

Options issue)

When you invoke a function that you've deployed to Oracle Functions, you might see the following error

message:

{"code":"FunctionInvokeSubnetNotAvailable","message":"dhcp options ocid1.dhcpoptions........ does not

exist or Oracle Functions is not authorized to use it"}

Fn: Error invoking function. status: 502 message: dhcp options ocid1.dhcpoptions........ does not exist or

Oracle Functions is not authorized to use it If you see this error:

Double-check that a policy has been created to give Oracle Functions access to network resources.

Service Access to Network Resources

When Oracle Functions users create a function or application, they have to specify a VCN and a subnet in

which to create them. To enable the Oracle Functions service to create the function or application in the

specified VCN and subnet, you must create an identity policy to grant the Oracle Functions service access

to the compartment to which the network resources belong. To create a policy to give the Oracle Functions

service access to network resources:

Log in to the Console as a tenancy administrator.

Create a new policy in the root compartment:

Open the navigation menu. Under Governance and Administration, go to Identity and click Policies. Follow

the instructions in To create a policy, and give the policy a name (for example, functions- service-networkaccess).

Specify a policy statement to give the Oracle Functions service access to the network resources in the

compartment:

Allow service FaaS to use virtual-network-family in compartment For example:

Allow service FaaS to use virtual-network-family in compartment acme-network Click Create.

Double-check that the set of DHCP Options in the VCN specified for the application still exists.

Correct Answer: C

Resource Manager is an Oracle Cloud Infrastructure service that allows you to automate the process of provisioning your Oracle Cloud Infrastructure resources. Using Terraform, Resource Manager helps you install, configure, and manage resources through the "infrastructure-as-code" model.