OCID24

Which statement about microservices is FALSE?. They are typically designed around business capabilities. It is fairly common for them to communicate with HTTP. Multiple microservices can run in one process. They are independently deployable.

Which testing measure should be considered when using test cases that simultaneously validate a deployment and perform a selected set of functional tasks?. Resource Utilization. Functionality. Scalability. Robust Deployment. Resiliency.

What is the open source engine for Oracle Functions?. Fn Project. Knative. OpenFaas. Apache OpenWhisk.

Which feature is typically NOT associated with Cloud Native?. Immutable Infrastructure. Declarative APIs. Containers. Application Servers. Service Meshes.

You want to push a new image in the Oracle Cloud Infrastructure (OCI) Registry. Which TWO actions would you need to perform? (Choose two.). Generate an API signing key to complete the authentication via Docker CLI. Generate an auth token to complete the authentication via Docker CLI. Assign an OCI defined tag via OCI CLI to the image. Assign a tag via Docker CLI to the image. Generate an OCI tag namespace in your repository.

You plan to implement logging in your services that will run in Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE). Which statement describes the appropriate logging approach?. All services log to standard output only. Each service logs to its own log file. All services log to an external logging system. All serviceAAs log to a shared log file.

Which is ONE of the differences between a microservice and a serverless function?. Microservices are used for long running operations while serverless functions are used for short running operations. Microservices are triggered by events while serverless functions are not. Microservices are stateless while serverless functions are stateful. Microservices always use a data store while serverless functions never use a data store.

What are the TWO main reasons you would choose to implement a serverless architecture? (Choose two.). No need for integration testing. Automatic horizontal scaling. Easier to run long-running operations. Reduced operational cost. Improved in-function state management.

You are a developing a microservices application that will be a consumer of the Oracle Cloud Infrastructure (OCI) Streaming service. Which API method should you use to read and process a stream?. GetStream. ReadMessages. ProcessStream. ReadStream. GetMessages.

You have created a repository in Oracle Cloud Infrastructure Registry (OCIR) in the us-ashburn-1 (iad) region in your tenancy with the heyoci namespace. Which three are valid tags for an image named myapp? (Choose three.). iad.ccir.io/heyoci/myapp:latest. iad.ocir.io/heyoci/myapp:0.0.2-beta. iad.ocir.io/heyoci/myproject/myapp:0.0.1. us-ashburn-1.ocir.io/myproject/heyoci/myapp:latest. us-ashburn-1.ocir.io/heyoci/myapp:0.0.2-beta. us-ashburn-1.ocir.io/heyoci/myproject/myapp:0.0.2-beta.

As a Cloud Native developer, you develop two services in Node.js and deploy them to two different Container Engine for Kubernetes (OKE) clusters that use the same Virtual Cloud Network (VCN). Your security team wants to analyze the network communication between them. How can this requirement be met in the most cost-effective way?. Rewrite the application and send the application logs to an outside log aggregator. Deploy a third-party logging service and aggregate the network flow logs. Use the OCI Logging service and enable VCN flow logs. Deploy Wireshark and intercept the packets.

Which of the following step is NOT required for setting up the Container Engine for Kubernetes (OKE) cluster access using a local installation of kubectl?. Generate Auth token from the OCI console to access the OKE cluster using kubectl. Install and configure the Oracle Cloud Infrastructure (OCI) CLI. Set up the kubeconfig file. Generate an API signing key pair (if you do not already have one) and upload the public key of the API signing key pair.

Which TWO statements are correct regarding Docker images and containers? (Choose two.). Only one container can be spawned from a given image at a time. An image is a collection of immutable layers whereas a container is a running instance of an image. If multiple containers are spawned from the same image, then they all use the same copy of that image in memory. Writing and building a new Dockerfile is the only way you can create new Docker images. A container can exist without an image but an image cannot exist without a container.

Which option best defines microservices?. A statically typed and compiled language. An open-source system for automating deployment, scaling, and management of containerized applications. A finely tuned piece of software that performs a single or small collection of tasks. An organized collection of structured information or data, typically stored electronically in a computer system.

A service you are deploying to Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) uses a docker image from a private repository in OCI Registry (OCIR). Which configuration is necessary to provide access to this repository from OKE?. Create a docker-registry secret for OCIR with API key credentials on the cluster, and specify the imagePullSecret property in the application deployment manifest. Create a docker-registry secret for OCIR with identity Auth Token on the cluster, and specify the imagePullSecret property in the application deployment manifest. C. Create a dynamic group for nodes in the cluster, and a policy that allows the dynamic group to read repositories in the same compartment. Add a generic secret on the cluster containing your identity credentials. Then specify a registryCredentials property in the deployment manifest.

Your Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) administrator has created an OKE cluster with one node pool in a public subnet. You have been asked to provide a log file from one of the nodes for troubleshooting purpose. Which step should you take to obtain the log file?. Use the username opc and password to login. It is impossible because OKE is a managed Kubernetes service. SSH into the nodes using the private key. SSH into the node using the public key.

You developed a microservices-based application that runs in an Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) cluster. Your security team wants to use SSL termination for this application. What should you do to create a secure SSL termination for this application using the fewest steps possible?. A. Create a self-signed certificate and its corresponding key. Create a Kubernetes secret using the certificate and the key. Then add these annotations to the Kubernetes service: annotations: service.beta.kubernetes.io/oci-load-balancer-ssl-ports: "443" service.beta.kubernetes.io/oci-load-balancer-tls-secret: ssl certificate-secret. Create a self-signed certificate and its corresponding key. Create a Kubernetes secret using the certificate and the key. Then add these annotations to the Kubernetes service: annotations:service.beta.kubernetes.io/oci-load-balancer-ssl-ports: "443" service.beta.kubernetes.io/oci-load-balancer-security-list management-mode: "Frontend". Add these annotations to the kubernetes service: annotations: service.beta.kubernetes.io/oci-load-balancer-ssl-ports: "443" service.beta.kubernetes.io/oci-load-balancer-ssl-secret-key: ssl secret-key. Generate a self-signed certificate using Let's Encrypt. Use that certificate on OCI Load Balancer. Create the Kubernetes service using this load balancer.

You are building a cloud native serverless travel application with multiple Oracle Functions in Java, Python, and Node.js. You need to build and deploy these functions to a single application named travel-app. Which command will help you complete this task successfully?. fn function deploy app travel-app--all. fn app deploy --app travel-app --all. fn app --app travel-app deploy --ext java pyljs. fn deploy--app travel-app --all.

Which of the following is NOT a criterion that is usually met by a microservice?. Organized around business capabilities. Tightly coupled. Highly maintainable. Independently deployable.

You have just finished building and compiling the software required to implement the API microservice component. You need to rebuild the API docker image, and plan to tag it as: ocIdevops/api:latest Which docker command would re-create the API docker image?. docker build -t OCIdevops/api:latest. docker create -t OCIdevops/api:latest. docker image -t OCIdevops/api:latest. docker compile -t OCI devops/api:latest.

You are developing a polyglot serverless application using Oracle Functions. Which language cannot be used to write your function code?. PL/SQL. Python. Node.js. Go. Java.

(CHK_4>2) You have a scenario where a DevOps team wants to store secrets in Oracle Cloud Infrastructure (OCI) Vault so that it can inject the secrets into an app's environment variables (for example, MYSQL_DB_PASSWD) at deployment time. Which is NOT valid about managing secrets in the OCI Vault service?. New secret versions automatically expire in 90 days unless you configure an expiry rule. You can manually create new secrets as well as new secret versions using the OCI Console. A unique OCID is automatically generated for each secret and remains unchanged even when creating a new secret version. A secret reuse rule prevents the use of secret contents across different versions of a secret.

You are creating an API deployment in Oracle Cloud Infrastructure (OCI) API Gateway and you want to configure request policies to control access. Which is NOT available in OCI API Gateway?. Controlling access to the backend OCI resources. Limiting the number of requests sent to the backend services. Enabling Cross-Origin Resource Sharing (CORS) support. Providing authentication and authorization.

You are building a container image and pushing it to Oracle Cloud Infrastructure Registry (OCIR). You need to ensure that these images never get deleted from the repository. Which action should you take?. Write a policy to limit access to the specific repository in your compartment. Create a group and assign a policy to perform lifecycle operations on images. Set global policy of image retention to "Retain All Images". Edit the tenancy global retention policy.

Your organization has deployed their e-commerce application on Oracle Container Engine for Kubernetes (OKE) and they are using the Oracle Cloud Infrastructure Registry (OCIR) service as their Docker image repository. They have deployed the OKE cluster using the 'custom create' option, and their Virtual Cloud Network (VCN) has three public subnets with associated Route Tables, Security Lists, and Internet Gateway. However, their application containers are failing to deploy. On investigation, they discover that the images are not being pulled from the designated OCIR repository, even though the YAML configuration has the correct path to the images. What is a valid concern here that needs to be further investigated?. Security List rule for TCP port 22 needs to be added to connect to the OCIR service. VCN hosting the OKE cluster worker nodes needs to have a NAT gateway to access OCIR repositories. Identity and Access Management (IAM) credentials need to be added for each user that deploys applications to the OKE cluster. OKE cluster needs to have a secret with the credentials of their OCIR repository and use that secret in the Kubernetes deployment manifest.

Your team has created a serverless application deployed in Oracle Functions. It uses a Python function leveraging the Oracle Cloud Infrastructure (OCI) Python SDK to stop any OCI compute instance that does not comply with your corporate security standards. Although there are three non-compliant OCI compute instances, when you invoke this function, none of the instances were stopped. With respect to this issue, which of the following is a valid troubleshooting strategy?. Enable function logging in the OCI console, add some print statements in your function code, and then view the logs to troubleshoot. Enable function remote debugging in the OCI console, and then use your favorite IDE to inspect the function running on Oracle Functions. Ensure that the application is deployed within the same OCI compartment as the instance, because you cannot enable function execution data from the OCI console. Enable function tracing in the OCI console, and then go to the OCI Monitoring console to view the function stack trace.

A Docker image consists of one or more layers, each of which represents a Dockerfile instruction. The layers are stacked and each one is a delta of the changes from the previous layer. What permission is associated with these layers?. read mostly. write only. movable. read only. write once.

Oracle Functions monitors all deployed functions and collects and reports various metrics. Which is NOT available when viewing the Application metrics in the Oracle Cloud Infrastructure (OCI) Console?. The length of time a function runs for. The number of retries made by the function before failing due to an error. The number of requests to invoke a function that failed due to throttling. The number of requests to invoke a function that failed with an error response.

Which TWO are required to access the Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) cluster from the kubectl CLI? (Choose two.). Tiller enabled on the OKE cluster. An SSH key pair with the public key added to the cluster worker nodes. Install and configure the OCI CLI. A configured OCI API signing key pair. OCI Identity and Access Management (IAM) Auth Token.

Which TWO statements accurately describe an Oracle Functions application? (Choose two.). A common context to store configuration variables that are available to all functions in the application. A Docker image containing all the functions that share the same configuration. An application based on Oracle Functions, Oracle Cloud Infrastructure (OCI) Events, and OCI API Gateway services. A small block of code invoked in response to an OCI Events service. A logical group of functions. A Docker image containing all the functions that share the same configuration.

A developer using Oracle Cloud Infrastructure (OCI) API Gateway needs to authenticate the API requests to their web application. The authentication process must be implemented using a custom scheme which accepts string-based parameters from the API caller. Which approach should the developer use in this scenario?. Create a cross account functions authorizer. Create an authorizer function using OCI Identity and Access Management 91AM) based authentication. Create an authorizer function using request header authorization. Create an authorizer function using token-based authorization.

To enforce mutual TLS (mTLS) authentication for clients of your microservices, your team has chosen to leverage the Oracle Cloud Infrastructure (OCI) API Gateway service to create new API Deployments that will direct requests to your microservices. Which is NOT valid regarding the mTLS options in OCI API Gateway?. Custom CA or custom CA bundles can be added to your gateway's trust store ONLY if they already exist in the OCI Certificates service. Adding a custom certificate authority (CA) or custom CA bundle to your gateway's trust store for mTLS is optional unless you need to reject certificates that do not contain particular values (such as a domain name). Once the mTLS request policy is enabled, ALL requests with valid certificates are routed to the backend unless you have defined one or more particular values (such as a domain name). The mTLS request policy can only be enabled at the API deployment specification level, which then applies globally to ALL routes in that deployment.

With the volume of communication that can happen between different components in cloud-native applications, it is vital to not only test functionality, but also service resiliency. Which statement is true regarding service resiliency?. Resiliency is about avoiding failures. Resiliency testing can be done only in a test environment. Resiliency is about recovering from failures without downtime or data loss. Resiliency is about not bringing a service to a functioning state after a failure.

You have two microservices, A and B running in production. Service A relies on APIs from service B. You want to test changes to service A without deploying all of its dependencies, which includes service B. Which approach should you take to test service A?. Test using a previous test version of service B. Test using an API mock of service B. Test using the current production version of service B. This is not possible because service B is a dependency.

You are developing a distributed application and you need a call to a path to always return a specific JSON content deploy an OCI API Gateway with the below API deployment specification. What is the correct value for type? { "routes" : [{ "path" : "/hello", "methods" : ["Get"), "backend" : { "type" : " -------------- ", "status" : 200, "headers" : [{ "name" : "Content-Type", "value" : "application/json" }] "body" : "{\"myjson\": \"consistent response\"}" }}]}. STOCK_RESPONSE_BACKEND. CONSTANT_BACKEND. JSON_BACKEND. HTTP_BACKEND.

Which statement accurately describes the Oracle Cloud Infrastructure (OCI) Load Balancer integration with OCI Container Engine for Kubernetes (OKE)?. OKE service provisions an OCI Load Balancer instance for each Kubernetes service with LoadBalancer type in the YAML configuration. OKE service provisions a single OCI Load Balancer instance shared with all the Kubernetes services with LoadBalancer type in the YAML configuration. OCI Load Balancer instance provisioning is triggered by the OCI Events service for each Kubernetes service with LoadBalancer type in the YAML configuration. OCI Load Balancer instance must be manually provisioned for each Kubernetes service that requires traffic balancing.

Which TWO are part of the Cloud Native Computing Foundation (CNCF) container runtime? (Choose two.). rkt-o. runc. getcd. containerd.

Which is NOT a valid option to execute a function deployed in Oracle Functions?. Invoke from the Docker CLI. Send signed HTTP requests to the function's invoke endpoint. Invoke from the Fn Project CLI. Trigger by an event in the Oracle Cloud Infrastructure (OCI) Events service. Invoke from the OCI CLI.

From a DevOps process standpoint, it is a good practice to keep changes to an application under version control. Which of the following allows changes to a Docker image to be stored in a version control system?. Updating docker-compose.yml. Executing docker commit. Executing docker save. Updating Dockerfile.

(CHK_4>3) Your development team decides to create and deploy some business logic to serverless Oracle Functions. You are asked to help facilitate the monitoring, logging, and tracing of these services. Which is NOT valid about troubleshooting Oracle Functions?. Oracle Functions invocation is enabled by default. Oracle Functions invocation logs are enabled at the application level. Oracle Functions metrics are available at both the function and application level. Oracle Functions tracing is enabled at the function level.

(CHK_4>2) Which TWO statements are NOT valid regarding the Oracle Cloud Infrastructure (OCI) Streaming service? (Choose two.). OCI Streaming stores all data for 24 hours by default, but that can be extended up to 7 days.B. Although OCI Streaming automatically encrypts all data while in transit, it is the developer's responsibility to encrypt data at rest, if needed. The throughput of a stream is defined by a partition. A partition provides 1 MB/sec data input and 2 MB/sec data output. A stream can be configured with either a public or a private endpoint with support for customer managed encryption keys. OCI Streaming can support up to 2,000 requests per second to each partition.

To effectively test your cloud native applications for "unknown unknowns", you need to employ various testing and deployment strategies. Which strategy involves exposing new functionality or features to only a small set of users?. A/B Testing. Component Testing. Blue/Green Deployment. Canary Deployment.

Your team has chosen to use master encryption key (MEK) within an Oracle Cloud Infrastructure (OCI) Vault for encrypting Kubernetes secrets associated with your microservice deployments in OCI Container Engine for Kubernetes (OKE) clusters so that you can easily manage key rotation. Which of the following is NOT valid about rotating keys in the OCI Vault service?. Once rotated, older key versions can be used for encryption until they are deleted. Both software and HSM-protected MEKS can be rotated. When you rotate an MEK, a new key version is automatically generated. Each key version is tracked internally with separate unique OCIDS.

You are developing a serverless application with Oracle Functions and Oracle Cloud Infrastructure Object Storage. Your function needs to read a JSON file object from an Object Storage bucket named "input-bucket" in compartment "qa-compartment". Your corporate security standards mandate the use of Resource Principals for this use case. Which two statements are needed to implement this use case? (Choose two.). Set up a policy to grant all functions read access to the bucket: allow all functions in compartment qa-compartment to read objects in target.bucket.name= "input-bucket'. Set up a policy to grant your user account read access to the bucket: allow user XYZ to read objects in compartment qa-compartment where target.bucket.name= "input-bucket'. Set up the following dynamic group for your function's OCID: Name: read-file-dg Rule: resource.id = "ocid1.fnfunc.oc1.phx.aaaaaaaakeaobctakezjz5i4ujj7g25q7sx5m vr55pms6f4da'. No policies are needed. By default, every function has read access to Object Storage buckets in the tenancy. Set up a policy with the following statement to grant read access to the bucket: allow dynamic-group read-file-dg to read objects in compartment qa- compartment where target.bucket.name= 'input-bucket'.

Which one of the following is NOT a valid backend-type supported by Oracle Cloud Infrastructure (OCI) API Gateway?. STOCK_RESPONSE_BACKEND. HTTP BACKEND. ORACLE_FUNCTIONS_BACKEND. ORACLE_STREAMS_BACKEND.

You encounter an unexpected error when invoking Oracle Functions from your Cloud Shell session named myfunction in the myapp application. Which option will get you more information on the error?. fn --verbose invoke myapp myfunction. fn --debug invoke myapp myfunction. Contact Oracle support with your error message. DEBUG=1 fn invoke myapp myfunction.

Which of the following TWO statements are TRUE about deleting a Kubernetes cluster? (Choose two.). Upon deleting a cluster, other resources created during the cluster creation process or associated with the cluster (such as VCNS, Internet Gateways, NAT Gateways, Route Tables, Security Lists, B. Load Balancers, and Block Volumes) are deleted automatically. If you change the auto-generated name of a worker node and then delete the cluster, the renamed worker node is not deleted. Upon deleting a cluster, no other resources created during the cluster creation process or associated with the cluster (such as VCNS. Internet Gateways, NAT Gateways, Route Tables, Security Lists. Load Balancers, and Block Volumes) are deleted automatically. Changing the auto-generated name of a worker node does not affect the deletion of the worker node when the cluster in which it is created is deleted. You cannot change the autogenerated names of the worker nodes in the format oke-c<part-of cluster- CCID>-<part-of-node-pool-OCID>-<part-of-subnet-OCID>-<slot> within a Kubernetes cluster.

(CHK_1>3) You have an e-commerce application that loads customers' transactional data into the Oracle Cloud Infrastructure (OCI) Streaming service. The data must now be extracted and transformed before sending it to a third-party REST endpoint. You have been directed to leverage the OCI Service Connector Hub to automate this process. Which configuration option would address this requirement?. Configure a new service connector as follows: • Source: Streaming • Task: Functions • Target: Functions. Configure a new service connector as follows: • Source: Streaming • Task: API Gateway • Target: Notifications. Configure a new service connector as follows: • Source: Streaming • Task: None • Target: Notifications. Configure a new service connector as follows: • Source: Streaming • Task: API Gateway • Target: Functions. Configure a new service connector as follows: • Source: Streaming • Task: Functions • Target: API Gateway.

Which THREE are valid statements regarding the OCI Container Engine for Kubernetes (OKE) service? (Choose three.). You must have access to an Oracle Cloud Infrastructure tenancy. Your tenancy must have sufficient quota on different types of resources. OKE cannot use existing network resources for the creation of a new cluster. OKE automatically creates and configures new network resources for the new cluster. There is a limit of three clusters within each region, but there is no limit on the number of nodes and pods you can create within each cluster.

Which TWO are characteristics of microservices? (Choose two.). Microservices communicate over lightweight APIs. Microservices can be implemented in limited number of programming languages. All microservices share a data store. Microservices are hard to test in isolation. Microservices can be independently deployed.

When developing microservices, each one can be developed in the language of choice. Which term describes this type of development? (Choose the best answer.). Agile. DevOps. Distributed. Polyglot.

A developer has created another version of a microservice and wants 10% of the traffic to flow towards it for testing purposes. The application is already configured using OCI (Oracle Cloud Infrastructure) Service Mesh. Which of the following steps is the right approach to achieve this goal?. Create a new Kubernetes deployment for the new version of the microservice and set the traffic splitting percentage to 10% in the Kubernetes service manifest. Use Kubernetes HPA (Horizontal Pod Autoscaler) to scale the new version of the microservice to handle 10% of the traffic automatically. Create a new entry in the routeRules field of the ingress gateway route table manifest to configure traffic splitting between the old and new versions of the microservice and set the percentage to 10%. Create a new entry in the routeRules field of the virtual service route table manifest to configure traffic splitting between the old and new versions of the microservice and set the percentage to 10%.

Which term describes a group formed by a master machine and a worker machine in a Kubernetes architecture?. Cluster. Node. Deployment. Container. Pod.

You have a containerized application that requires access to an Autonomous Transaction Processing (ATP) Database. Which option is NOT valid when the container is deployed in an OKE cluster? (Choose the best answer.). Use Kubernetes secrets to configure environment variables on the container with ATP instance OCID, and OCI API credentials. Then use the CreateConnection API endpoint from the service runtime. Install the Oracle Cloud Infrastructure Service Broker on the Kubernetes cluster and deploy ServiceInstance and ServiceBinding resources for ATP. Then use the specified binding name as a volume in the application deployment manifest. Create a Kubernetes secret with contents from the instance Wallet files. Use this secret to create a volume mounted to the appropriate path in the application deployment manifest. Enable Oracle REST Data Services for the required schemas and connect via HTTPS.

You are using Oracle Cloud Infrastructure (OCI) Resource Manager to manage your infrastructure lifecycle and wish to receive an email each time a Terraform action begins. How should you use the OCI Events service to do this without writing any code?. Create a rule in OCI Events service matching the "Resource Manager Stack - Update" condition. Then select "Action Type: Email" and provide the destination email address. Create an OCI Notification topic and email subscription with the destination email address. Then create an OCI Events rule matching "Resource Manager Job - Create" condition, and select the notification topic for the corresponding action. Create an OCI Email Delivery configuration with the destination email address. Then create an OCI Events rule matching "Resource Manager Job - Create" condition, and select the email configuration for the corresponding action. Create an OCI Notifications topic and email subscription with the destination email address. Then create an OCI Events rule matching "Resource Manager Stack - Update" condition, and select the notification topic for the corresponding action.

signed by a specified master encryption key (MEK). You have appropriately signed the container images as part of your build process, but must now ensure that they are automatically verified when they are deployed to Oracle Cloud Infrastructure (OCI) Container Engine for Kubemetes (OKE) clusters. Which option should be used to mandate image verification when deploying to OKE clusters, assuming that MEK is already stored in an available OCI Vault? (Choose the best answer.). Enable image verification policies separately for each Kubemetes pod deployment because this is enforced at the pod level. Enable image verification policies separately for each node pool within each OKE cluster because this is enforced at the node pool level. Enable image verification policies separately for each OKE cluster because this is enforced at the cluster level. (Correct). Enable Image verification policies for your OKE service control plane which will enforce this for all OKE clusters.

Which is NOT a valid use case for leveraging the Oracle Cloud Infrastructure (OCI) Events service?. Capturing the OCI Monitoring service alarms and invoking autoscaling of compute instances. Publishing a notification when long-lived tasks complete, such as an OCI Autonomous Database backup completion. Triggering a notification action when a function completes its execution. Triggering a function deployed in Oracle Functions when new files are uploaded to an OCI Object Storage bucket. Publishing all the OCI resource events in a specific compartment to the OCI Streaming service for later analysis.

As a Cloud Native developer, you have written a web service for your company. However, your security team has suggested that your web service should address Distributed Denial-of-Service (DDoS) attack. You are time-constrained and you need to ensure that this is implemented as soon as possible. What should you do in this scenario? (Choose the best answer.). Use a third party service integration to Implement DDoS attack mitigation. Re-write your web service and implement rate limiting. Use the OCI Virtual Cloud Network (VCN) segregation to control DDoS. Use the OCI API Gateway service and configure rate limiting.

You are building a container image and pushing it to Oracle Cloud Infrastructure Registry (OCIR). You need to ensure that these images never get deleted from the repository. Which action should you take?. Create a group and assign a policy to perform lifecycle operations on images. Write a policy to limit access to the specific repository in your compartment. Edit the tenancy global retention policy. Set global policy of image retention to "Retain All Images".

Your organization is developing serverless applications with Oracle Functions. Many functions will need to store state data in a database, which will require using appropriate credentials. However, your corporate security standards mandate encryption of secret information, such as database passwords. How would you address this security requirement?. Use OCI Console to enter the password in the function configuration section in the provided input field. Leverage application-level configuration variables to store passwords because they are automatically encrypted by Oracle Functions. Use the OCI Vault service to auto-encrypt the password and then set an application-level configuration variable to reference the auto-decrypted password inside your function container. Encrypt the password using the OCI Vault service and then decrypt this password in your function code with the generated key.

What is the difference between continuous delivery and continuous deployment in the DevOps methodology? (Choose the best answer.). Continuous delivery involves automation of developer tasks, whereas continuous deployment involves manual operational tasks. Continuous delivery requires automatic linting, whereas continuous deployment testing must be run manually. Continuous delivery utilizes automatic deployment to a development environment, whereas continuous deployment involves automatic deployment to a production environment. Continuous delivery is a process that Initiates deployment manually, whereas continuous deployment is based on automating the deployment process.

As a developer, you have been tasked with implementing a microservices-based application. Which THREE technologies are best suited to accomplish the task? (Choose three.). Terraform. Big Data. Anomaly Detection. Service Mesh. Docker. Kubemetes.

You are tasked with developing an application that requires the use of Oracle Cloud Infrastructure (OCI) APIs to POST messages to a stream in the OCI Streaming service. Which statement is incorrect? (Choose the best answer.). The Content-Type header must be set to application/json. The request must include an authorization signing string including (but not limited to) x-content-sha256, content-type, and content-length headers. The request does not require an Authorization header. An HTTP 401 will be returned if the client's clock is skewed more than 5 minutes from the server's.

You are developing a real-time monitoring application for a fleet of vehicles, which will be deployed on Oracle Cloud Infrastructure (OCI). You need to choose between using OCI Queue or OCI Streaming to handle the real-time data feeds from the vehicles. Based on the scenario described, which is the most appropriate choice for handling real-time data feeds?. OCI Streaming, because it is designed for high-volume, continuous ingestion and processing of data, making it the best choice for a fleet of vehicles. OCI Streaming, because it offers exactly-once message delivery, which is necessary for real-time applications. OCI Queue, because it is optimized for low-latency messaging and ideal for real-time applications. OCI Queue, because it provides at-least-once message delivery, which is critical for real-time monitoring applications.

A company is developing a new application that needs to process transactions in real time. The company wants to ensure that all transactions are processed in order and that no transaction is lost. Which of these is a correct strategy for leveraging OCI Queue in this scenario?. Use a separate queue for each type of transaction. Use a single queue to process all transactions. Use a separate queue for each application instance. Use a priority queue to prioritize requests.

You deployed a Python application to an Oracle Container Engine for Kubernetes (OKE) cluster. However, while testing you found a bug, which you rectified and then created a new Docker image. You now need to ensure that if this new image does not work once deployed, you should be able to roll back to the previous version. Using kubect1, which strategy should you use?. Blue/Green Deployment. Canary Deployment. Rolling Update. A/B Testing.

You have been asked to update an OKE cluster to a network configuration that has the least attack surface while the deployed applications are still directly available for access from the Internet. Which is a valid OKE cluster network configuration that meets this requirement? (Choose the best answer.). Private subnets for nodes, the Kubemetes API endpoint, and load balancers. Private subnets for nodes; public subnets for the Kubemetes API endpoint and load balancers. Private subnets for nodes and the Kubemetes API endpoint; public subnets for load balancers. Private subnet for the Kubemetes API endpoint; public subnets for nodes and load balancers.

How are cloud native application versions deployed to an OKE cluster when using a blue/green deployment strategy?. Current applications are slowly replaced with new application versions. New application versions are deployed in minor increments to a select group of people. Both old and new application versions are deployed to production at the same time.

Which statement best describes the term "cloud native"?. Cloud native refers to the process of migrating applications from on-premises infrastructure to the cloud. Cloud native refers to the use of cloud-based development tools to build traditional on-premises applications. Cloud native refers to the design and deployment of applications that are optimized for cloud infrastructure. Cloud native refers to the use of cloud infrastructure to run traditional on-premises applications.

As a cloud-native developer, you are designing an application that depends on Oracle Cloud Infrastructure (OCI) Object Storage wherever the application is running. Therefore, provisioning of storage buckets should be part of your Kubernetes deployment process for the application. Which of the following should you leverage to meet this requirement? (Choose the best answer.). Oracle Functions. OCI Service Broker for Kubernetes. Open Service Broker API. OCI Container Engine for Kubernetes.

Which TWO statements are true for serverless computing and serverless architectures? (Choose two.). Serverless function execution is fully managed by third party. Applications running on a FaaS (Functions as a Service) platform. Long running tasks are perfectly suited for serverless. Application DevOps team is responsible for scaling. Serverless function state should never be stored externally.

What is the difference between blue/green and canary deployment strategies? (Choose the best answer.). In blue/green, current applications are slowly replaced with new ones. In canary, the application Is deployed Incrementally to a select group of people. In blue/green, both old and new applications are in production at the same time. In canary, the application Is deployed incrementally to a select group of people. In blue/green, current applications are slowly replaced with new ones. In canary, both old and new applications are in production at the same time. In blue/green, the application Is deployed In minor Increments to a select group of people. In canary, both old and new applications are simultaneously in production.

Which command is used to get a Docker image from Oracle Cloud Infrastructure Registry (OCIR) to the client machine?. docker pull <region-key>.ocir.io/<tenancy-namespace>/<repo-name>: <tag>. docker pull <tenancy-namespace>/<region-key>.ocir.io/<repo-name>: <tag>. docker fetch <region-key>.ocir.io/<tenancy-namespace>/<repo-name>:<tag>. docker fetch <tenancy-namespace>/<region-key>.ocir.io/<repo-name>:<tag>.

You need to push a new Docker container image to a repository in the Oracle Cloud Infrastructure (OCI) Registry. Which mechanism must you use to provide authentication?. Generate an API signing key to complete the authentication via the Docker CLI. Generate an Auth Token to complete the authentication via the OCI CLI. Generate an API signing key to complete the authentication via the OCI CLI. Generate an Auth Token to complete the authentication via the Docker CLI.

Which of the following is defined as a configurable, low-latency infrastructure layer that controls the interaction between a network of microservices? (Choose the best answer.). Containers. Kubernetes. CI/CD Pipelines. DevOps. Service Mesh.

Which "Action Type" option is NOT available in an Oracle Cloud Infrastructure (OCI) Events rule definition?. Streaming. Email. Notifications. Functions.

Your team has been tasked with debugging a Cloud Native application developed using the following Oracle Cloud Infrastructure (OCI) services: Object Storage, Events, Functions, API Gateway, and Autonomous Database. Which of these is NOT a valid option for troubleshooting issues in OCI? (Choose the best answer.). View service metric information from the OCI Monitoring service. Configure the application to send logs to the OCI Logging service. Use OCI Service Connector Hub to configure a service connector to automatically send logs to the OCI Logging Analytics service. Trace performance issues In the Application Performance Monitoring service by enabling Function traces. Leverage OCI Cloud Guard to extract and visualize the debug logs generated by your application.

Which of these is NOT a valid authentication method for accessing an OCI API Gateway deployment?. HTTP Basic. API Key. OAuth. SAML Token.

You are instructed to automate manual tasks and help software teams manage complex environments at scale using the Oracle Cloud Infrastructure (OCI) services. Which THREE OCI services can be leveraged to securely store and version your application's source code, and automate the building, testing, and deployment of applications to the OCI platform? (Choose three.). DevOps. Container Engine for Kubernetes. Oracle APEX Application Development. Resource Manager. Oracle Cloud Infrastructure Registry. Oracle Cloud Logging Analytics.

You developed a microservices-based application that runs in an Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) cluster. It has multiple endpoints that need to be exposed to the public internet. What is the most cost-effective way to expose multiple application endpoints without adding unnecessary complexity to the application?. Use a NodePort service type in Kubernetes for each of your service endpoints using the node's public IP address to access the applications. Create a separate load balancer instance for each service using the lowest 100 Mbps option. Use a ClusterIP service type in Kubernetes for each of your service endpoints using a load balancer to expose the endpoints. Deploy an Ingress Controller and use it to expose each endpoint with its own routing endpoint.

Which is the smalled unit of Kubernetes architecture?. Node. Container. Cluster. Pod.

Your company has recently deployed a new web application that uses Oracle Functions. Your manager instructs you to implement monitoring metrics to manage your systems more effectively. You know that Oracle Functions automatically monitors functions on your behalf and reports metrics via Oracle Cloud Infrastructure (OCI) Monitoring. Which TWO metrics are collected and made available by this feature? (Choose two.). Amount of CPU used by a function. Length of time a function runs. Number of times a function Is removed. Amount of RAM used by a function. Number of times a function is invoked.

Kubernetes includes various elements such as compute, network, and storage. Compute is essentially CPU (units) and memory (bytes). Within an OKE cluster, what is considered to be the smallest unit of deployment with respect to compute?. Container. Service. Pod. Namespace. Deployment resource.

Which testing strategy achieves high velocity of deployments and releases of cloud native applications? (Choose the best answer.). Penetration testing. Automated testing. Integration testing. A/B testing.

Which is NOT a valid backend-type option available when configuring an Oracle Cloud Infrastructure (OCI) API Gateway Deployment?. HTTP_BACKEND. ORACLE STREAMS_BACKEND. ORACLE_FUNCTIONS_BACKEND.

Which kubectl command syntax is valid for implementing a rolling update deployment strategy in Kubernetes? (Choose the best answer.). kubectl upgrade -c <container> --image=image:v2. kubectl update <deployment-name> --image=image:v2. kubectl rolling-update <deployment-name> --image=image:v2. kubectl update -c <container> --iniage=image: v2.

What is the maximum execution time of Oracle Functions?. 240 seconds. 300 seconds. 60 seconds. 120 seconds.

Who is responsible for patching, upgrading, and maintaining the worker nodes in Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE)? (Choose the best answer.). Oracle Support. It is automated. The user. Independent Software Vendors.

Which two "Action Type" options are NOT available in an Oracle Cloud Infrastructure (OCI) Events rule definition? (Choose two.). Email. Streaming. Slack. Functions. Notifications.

Which concept in OCI Queue is responsible for hiding a message from other consumers for a predefined amount of time after it has been delivered to a consumer?. Maximum retention period. Visibility timeout. Delivery count. Polling timeout.

Assuming that your function does NOT have the --provisioned-concurrency option enabled, which parameter is used to configure the time period during which an idle function will remain in memory before Oracle Functions removes its container image from memory?. timeout. access-timeout. idle-timeout. None, as this time is not configurable.

Having created a Container Engine for Kubernetes (OKE) cluster, you can use Oracle Cloud Infrastructure (OCI) Logging to view and search the logs of applications running on the worker node compute instances in the cluster. Which task is NOT required to collect and parse application logs? (Choose the best answer.). Create a dynamic group with a rule that includes all worker nodes In the cluster. Set the OCI Logging option to Enabled for the cluster. Enable monitoring for all worker nodes in the cluster. Configure a custom log in OCI Logging with the appropriate agent configuration.

Which open source engine is used by Oracle Cloud Infrastructure (OCI) to power Oracle Functions?. Knative. Kubeless. Apache OpenWhisk. Fn Project.

A DevOps engineer is troubleshooting the Meshifyd application, which is running in an Oracle Cloud Infrastructure (OCI) environment. The engineer has set up the OCI Logging service to store access logs for the application but notices that the logs from the Meshifyd application are not showing up in the logging service. The engineer suspects that there might be an issue with the logging configuration. Which two statements are potential reasons for logs from the Meshifyd application not showing up in the OCI Logging service?. The logconfig.json file has incorrect or missing OCID for the custom log in the logobjectId field. The OCI Logging service is set up to pre access logs by creating a log group and custom log within the same compartment. The logconfig.json file has incorrect or missing information in the application namespace in the paths field. The logconfig.json file has incorrect or missing information in the application namespace in the src field. The logconfig.json file has incorrect or missing OCID for the custom log group in the logGroupObjectId field.

What can you use to dynamically make Kubernetes resources discoverable to public DNS servers? (Choose the best answer.). kubeDNS. DynDNS. CoreDNS. ExternalDNS.

You have two microservices, A and B, running in production. Service A relies on APIs from service B. You want to test changes to service A without deploying all of its dependencies, which include service B. Which approach should you take to test service A?. Test using API mocks. Test the APIs in private environments. Test against production APIs. There is no need to explicitly test APIs.

In the DevOps lifecycle, what is the difference between continuous delivery and continuous deployment? (Choose two.). Continuous delivery involves automation of developer tasks, while continuous deployment involves manual operational tasks. Continuous delivery utilizes automatic deployment to a development environment, while continuous deployment involves automatic deployment to a production environment. Continuous delivery requires more automatic linting, while continuous deployment testing must be run manually. Continuous delivery is a process that initiates deployment manually, while continuous deployment is based on automating the deployment process.

Which of these is a valid use case for OCI Queue?. Managing network traffic between services. Storing and retrieving large files. Sending real-time streaming data. Building decoupled and scalable systems.

Which technique is used for testing the entire user flow as well as the moving parts of a cloud native app, ensuring that there are no high-level discrepancies?. Contract Testing. Integration Testing. Unit Testing. Component Testing. End-to-end Testing.

In the shared responsibility model, who should perform patching, upgrading, and maintaining of the worker nodes in provisioned Oracle Container Engine for Kubernetes (OKE) clusters?. Oracle Support does it. It is the responsibility of the customer. It is an automated process.