Oracle 1z0-1084-26 問題集

質問 1：
Your organization mandates that all containerized workloads deployed to Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) must utilize Kubernetes NetworkPolicy resources, such as Calico, to enforce strict micro-segmentation of traffic. You have deployed these workloads to an enhanced OKE cluster using virtual node pools to minimize infrastructure maintenance. During testing, you discover that the Calico installation fails because NetworkPolicy resources and third-party CNI policy integrations are completely unsupported on this specific node configuration. How should you resolve this security implementation challenge while continuing to use VCN-Native Pod Networking?
A. Define an OCI IAM policy that grants the OKE workload identity access to manage network security lists at the virtual node level.
B. Upgrade your OKE virtual nodes to Kubernetes version 1.30 or higher, which enables native, agentless NetworkPolicy support on virtual nodes.
C. Migrate your workloads to managed node pools within the OKE cluster, where VCN-Native Pod Networking supports Calico for NetworkPolicy enforcement.
D. Reconfigure your virtual node pools to use the Flannel overlay plugin, which natively implements network policy isolation on virtual nodes.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Your development team wants to configure API Gateway request validation to shield an upstream backend microservice from ill-formed API calls. You want to test the validation rules in your staging environment first without blocking any non-compliant client requests, and you want to ensure the gateway checks that a mandatory HTTP header is present. Which TWO configurations should you apply to your API Gateway deployment specification to meet this requirement?
A. Create a dynamic group and IAM policy to grant the API Gateway permission to inspect incoming request bodies in real-time.
B. Set the request validation policy mode to Enforcing to forward failed requests to the execution log instead of blocking them.
C. Set the request validation policy mode to Permissive to log validation failures without rejecting requests.
D. Use the request.auth[ < key > ] context variable inside a Stock Response backend to log non-compliant headers.
E. Configure the request validation policy with header validations to mandate the presence of the required HTTP header.
正解：C,E
解説: (Topexam メンバーにのみ表示されます)

質問 3：
(CHK_4 > 2) You have a scenario where a DevOps team wants to store secrets in Oracle Cloud Infrastructure (OCI) Vault so that it can inject the secrets into an app ' s environment variables (for example, MYSQL_DB_PASSWD) at deployment time. Which is NOT valid about managing secrets in the OCI Vault service?
A. New secret versions automatically expire in 90 days unless you configure an expiry rule.
B. A unique OCID is automatically generated for each secret and remains unchanged even when creating a new secret version.
C. A secret reuse rule prevents the use of secret contents across different versions of a secret.
D. You can manually create new secrets as well as new secret versions using the OCI Console:
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Which of the following step is NOT required for setting up the Container Engine for Kubernetes (OKE) cluster access using a local installation of kubectl?
A. Install and configure the Oracle Cloud Infrastructure (OCI) CLI.
B. Generate an API signing key pair (if you do not already have one) and upload the public key of the API signing key pair.
C. Set up the kubeconfig file.
D. Generate Auth token from the OCI console to access the OKE cluster using kubectl.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Which testing strategy achieves high velocity of deployments and releases of cloud native applications?
(Choose the best answer.)
A. Penetration testing
B. Integration testing
C. A/B testing
D. Automated testing
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 6：
A developer has created another version of a microservice and wants 10% of the traffic to flow towards it for testing purposes. The application is already configured using OCI (Oracle Cloud Infrastructure) Service Mesh. Which of the following steps is the right approach to achieve this goal?
A. Create a new entry in the routeRules field of the virtual service route table manifest to configure traffic splitting between the old and new versions of the microservice and set the percentage to 10%.
B. Use Kubernetes HPA (Horizontal Pod Autoscaler) to scale the new version of the microservice to handle 10% of the traffic automatically.
C. Create a new entry in the routeRules field of the ingress gateway route table manifest to configure traffic splitting between the old and new versions of the microservice and set the percentage to 10%.
D. Create a new Kubernetes deployment for the new version of the microservice and set the traffic splitting percentage to 10% in the Kubernetes service manifest.
正解：A

質問 7：
Which special column in the OCI Logging Query Language represents the raw text of the entire original log message?
A. logContent
B. eventSource
C. messageBody
D. rawPayload
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 8：
Your security operations team wants to analyze application diagnostic and access patterns across both service and custom logs. A new IAM user group named security-auditors has been formed, and members must run advanced ad-hoc queries using the OCI Logging Console Search page to parse through indexed logs in the tenancy. Your company security mandate dictates that they must only be granted the minimum required permissions necessary to successfully execute these search queries and view the results.
Which set of policy statements correctly implements this requirement?
A. Allow group security-auditors to manage log-groups in tenancyAllow group security-auditors to use log- content in tenancy
B. Allow group security-auditors to inspect log-groups in tenancyAllow group security-auditors to inspect log-content in tenancy
C. Allow group security-auditors to read log-groups in tenancyAllow group security-auditors to read log- content in tenancy
D. Allow group security-auditors to read log-groups in tenancyAllow group security-auditors to use log- content in tenancy
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 9：
Which open source engine is used by Oracle Cloud Infrastructure (OCI) to power Oracle Functions?
A. Knative
B. Fn Project
C. Kubeless
D. Apache OpenWhisk
正解：B
解説: (Topexam メンバーにのみ表示されます)