Oracle 1z0-1084-24 問題集

質問 1：
To enforce mutual TLS (mTLS) authentication for clients of your microservices, your team has chosen to leverage the Oracle Cloud Infrastructure (OCI) API Gateway service to create new API Deployments that will direct requests to your microservices. Which is NOT valid regarding the mTLS options in OCI API Gateway?
A. Adding a custom certificate authority (CA) or custom CA bundle to your gateway's trust store for mTLS is optional unless you need to reject certificates that do not contain particular values (such as a domain name).
B. The mTLS request policy can only be enabled at the API deployment specification level, which then applies globally to ALL routes in that deployment.
C. Once the mTLS request policy is enabled, ALL requests with valid certificates are routed to the backend unless you have defined one or more particular values (such as a domain name).
D. Custom CA or custom CA bundles can be added to your gateway's trust store ONLY if they already exist in the OCI Certificates service.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Which command is used to get a Docker image from Oracle Cloud Infrastructure Registry (OCIR) to the client machine?
A. docker pull <region-key>.ocir.io/<tenancy-namespace>/<repo-name>: <tag>
B. docker fetch <region-key>.ocir.io/<tenancy-namespace>/<repo-name>:<tag>
C. docker fetch <tenancy-namespace>/<region-key>.ocir.io/<repo-name>:<tag>
D. docker pull <tenancy-namespace>/<region-key>.ocir.io/<repo-name>: <tag>
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 3：
Your organization is developing serverless applications with Oracle Functions. Many functions will need to store state data in a database, which will require using appropriate credentials. However, your corporate security standards mandate encryption of secret information, such as database passwords. How would you address this security requirement?
A. Use the OCI Vault service to auto-encrypt the password and then set an application-level configuration variable to reference the auto-decrypted password inside your function container.
B. Encrypt the password using the OCI Vault service and then decrypt this password in your function code with the generated key.
C. Leverage application-level configuration variables to store passwords because they are automatically encrypted by Oracle Functions.
D. Use OCI Console to enter the password in the function configuration section in the provided input field.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Which term describes a group formed by a master machine and a worker machine in a Kubernetes architecture?
A. Deployment
B. Container
C. Pod
D. Cluster
E. Node
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 5：
You encounter an unexpected error when invoking Oracle Functions from your Cloud Shell session named myfunction in the myapp application. Which option will get you more information on the error?
A. fn --debug invoke myapp myfunction
B. DEBUG=1 fn invoke myapp myfunction
C. Contact Oracle support with your error message
D. fn --verbose invoke myapp myfunction
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Which is the smalled unit of Kubernetes architecture?
A. Container
B. Pod
C. Cluster
D. Node
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 7：
As a Cloud Native developer, you have written a web service for your company. However, your security team has suggested that your web service should address Distributed Denial-of-Service (DDoS) attack. You are time-constrained and you need to ensure that this is implemented as soon as possible. What should you do in this scenario? (Choose the best answer.)
A. Use the OCI Virtual Cloud Network (VCN) segregation to control DDoS.
B. Use a third party service integration to Implement DDoS attack mitigation.
C. Re-write your web service and implement rate limiting.
D. Use the OCI API Gateway service and configure rate limiting.
正解：D
解説: (Topexam メンバーにのみ表示されます)