Oracle 1Z0-1084-25 Dumps – The Sure Way To Pass Exam [Q41-Q65]

Rate this post

Oracle 1Z0-1084-25 Dumps – The Sure Way To Pass Exam

1Z0-1084-25 Exam Questions (Updated 2026) 100% Real Question Answers

Oracle 1Z0-1084-25 Exam Syllabus Topics:

Topic	Details
Topic 1	Monitoring & Troubleshooting Cloud-Native Applications: This section of the exam focuses on monitoring and troubleshooting cloud-native applications. It covers using OCI Monitoring to track metrics, OCI Logging for managing logs and performing tasks related to monitoring, logging, and tracing for better observability and issue resolution.
Topic 2	Cloud Native Applications and Containerization: This section of the exam covers containerization technologies for cloud-native applications. It explains Docker architecture, its components, and the process of pulling and pushing container images using Oracle Cloud Infrastructure Registry (OCIR). It also explores container orchestration, deploying applications on Oracle Kubernetes Engine (OKE), and using OCI Service Mesh for Kubernetes deployments.
Topic 3	Testing and Securing Cloud-Native Applications: This section focuses on testing strategies and security for cloud-native applications. It discusses different testing methodologies, securing sensitive information using OCI Vault, and implementing security measures to address cloud-native development challenges.
Topic 4	Leveraging Serverless Technologies for Cloud Native Development: This section of the exam measures the skills of professionals in serverless development within OCI. It covers creating serverless applications using Oracle Functions, building API gateways for routing traffic, and integrating systems through OCI Streaming Service. Additionally, it explores event-driven architectures using OCI Event Service and how OCI Queue enables asynchronous messaging between microservices.
Topic 5	Cloud Native Fundamentals: This section of the exam measures the skills of target audience and covers the essential principles of cloud-native development. It explains the core concepts, key pillars, and advantages of cloud-native applications. The section also focuses on microservices architecture, including its design methodology and how it supports scalable, distributed applications.

QUESTION 41
You plan to implement logging in your services that will run in Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE). Which statement describes the appropriate logging approach?

All services log to standard output only.

Each service logs to its own log file.

All services log to an external logging system.

All serviceAAs log to a shared log file.

QUESTION 42
Which “Action Type” option is NOT available in an Oracle Cloud Infrastructure (OCI) Events rule definition?

Streaming

Notifications

Functions

QUESTION 43
Which TWO statements are correct regarding Docker images and containers? (Choose two.)

Only one container can be spawned from a given image at a time.

An image is a collection of immutable layers whereas a container is a running instance of an image.

If multiple containers are spawned from the same image, then they all use the same copy of that image in memory.

Writing and building a new Dockerfile is the only way you can create new Docker images.

A container can exist without an image but an image cannot exist without a container.

Which TWO statements are correct regarding Docker images and containers? (Choose two.) Writing and building a new Dockerfile is the only way you can create new Docker images. A container can exist without an image but an image cannot exist without a container. Only one container can be spawned from a given image at a time. If multiple containers are spawned from the same image, then they all use the same copy of that image in memory. (Correct) An image is a collection of immutable layers whereas a container is a running instance of an image. (Correct) ChatGPT The correct statements regarding Docker images and containers are: If multiple containers are spawned from the same image, then they all use the same copy of that image in memory. This statement is correct. When multiple containers are created from the same Docker image, they share the underlying layers of the image in memory. Each container has its own isolated filesystem and runtime environment, but they all use the same base image, which helps in efficient resource utilization. An image is a collection of immutable layers whereas a container is a running instance of an image. This statement is also correct. Docker images are composed of multiple layers, with each layer representing a specific change or addition to the previous layer. These layers are read-only and can be shared among multiple containers. On the other hand, a container is a lightweight and isolated runtime instance created from a specific image. It is a running process that has its own filesystem, network, and runtime configuration. The statements “Writing and building a new Dockerfile is the only way you can create new Docker images” and “A container can exist without an image but an image cannot exist without a container” are incorrect. Docker images can be created in various ways, including using Dockerfiles, importing from existing images, or pulling from registries. Additionally, a container requires an image to run, so an image must exist before a container can be created from it.

QUESTION 44
Your team has created a serverless application deployed in Oracle Functions. It uses a Python function leveraging the Oracle Cloud Infrastructure (OCI) Python SDK to stop any OCI compute instance that does not comply with your corporate security standards. Although there are three non-compliant OCI compute instances, when you invoke this function, none of the instances were stopped. With respect to this issue, which of the following is a valid troubleshooting strategy?

Enable function logging in the OCI console, add some print statements in your function code, and then view the logs to troubleshoot.

Enable function remote debugging in the OCI console, and then use your favorite IDE to inspect the function running on Oracle Functions.

Ensure that the application is deployed within the same OCI compartment as the instance, because you cannot enable function execution data from the OCI console.

Enable function tracing in the OCI console, and then go to the OCI Monitoring console to view the function stack trace.

The valid troubleshooting strategy in this scenario is to enable function logging in the OCI console, add some print statements in your function code, and then view the logs to troubleshoot. Enabling function logging allows you to capture and store logs generated by your function during its execution. By adding print statements or log statements in your function code, you can output relevant information and debug messages to the logs. This helps you understand the execution flow, identify any errors or issues, and gather more information about the function’s behavior. To troubleshoot the issue of the Python function not stopping the non-compliant OCI compute instances, you can follow these steps: Enable function logging in the OCI console: Enable logging for your function to ensure that logs are captured during its execution. Modify your function code: Add relevant print statements or log statements at key points in your code to output debug information or verify the execution flow. For example, you can print the instance details that are being evaluated for compliance. Invoke the function: Trigger the function execution either through an event or manually. View the logs: Access the function logs in the OCI console or retrieve them programmatically. Look for the expected print statements or log entries that indicate the status of each instance and the decisions made by the function. By reviewing the logs, you can analyze the output and identify any issues or discrepancies. It can help you determine if the function is correctly evaluating the compliance criteria, retrieving the instance details, or making the necessary API calls to stop the instances. You may need to adjust your code logic or investigate further based on the information provided in the logs. Enabling function remote debugging is not a suitable strategy in this case because it is primarily used for inspecting and debugging the function code during development, rather than troubleshooting issues in a deployed function. Enabling function tracing can provide insights into the execution flow and performance of the function but may not directly address the issue of the instances not being stopped. Ensuring that the application is deployed within the same OCI compartment as the instance is not directly related to troubleshooting the issue with the non-compliant instances. It is a consideration for access and permissions but does not provide specific insights into the problem at hand. Remember to refer to the Oracle Functions documentation and consult the official resources for detailed instructions and best practices on troubleshooting and monitoring Oracle Functions.

QUESTION 45
You are using Oracle Cloud Infrastructure (OCI) Resource Manager to manage your infrastructure lifecycle and wish to receive an email each time a Terraform action begins. How should you use the OCI Events service to do this without writing any code?

Create a rule in OCI Events service matching the “Resource Manager Stack – Update” condition. Then select “Action Type: Email” and provide the destination email address.

Create an OCI Notification topic and email subscription with the destination email address. Then create an OCI Events rule matching “Resource Manager Job – Create” condition, and select the notification topic for the corresponding action.

Create an OCI Email Delivery configuration with the destination email address. Then create an OCI Events rule matching “Resource Manager Job – Create” condition, and select the email configuration for the corresponding action.

Create an OCI Notifications topic and email subscription with the destination email address. Then create an OCI Events rule matching “Resource Manager Stack – Update” condition, and select the notification topic for the corresponding action.

QUESTION 46
You are instructed to automate manual tasks and help software teams manage complex environments at scale using the Oracle Cloud Infrastructure (OCI) services. Which THREE OCI services can be leveraged to securely store and version your application’s source code, and automate the building, testing, and deployment of applications to the OCI platform? (Choose three.)

DevOps

Container Engine for Kubernetes

Oracle APEX Application Development

Resource Manager

Oracle Cloud Infrastructure Registry

Oracle Cloud Logging Analytics

QUESTION 47
Oracle Functions monitors all deployed functions and collects and reports various metrics. Which is NOT available when viewing the Application metrics in the Oracle Cloud Infrastructure (OCI) Console?

The length of time a function runs for.

The number of retries made by the function before failing due to an error.

The number of requests to invoke a function that failed due to throttling.

The number of requests to invoke a function that failed with an error response.

QUESTION 48
Your company has recently deployed a new web application that uses Oracle Functions. Your manager instructs you to implement monitoring metrics to manage your systems more effectively. You know that Oracle Functions automatically monitors functions on your behalf and reports metrics via Oracle Cloud Infrastructure (OCI) Monitoring. Which TWO metrics are collected and made available by this feature? (Choose two.)

Amount of CPU used by a function

Number of times a function Is removed

Number of times a function is invoked

Length of time a function runs

Amount of RAM used by a function

QUESTION 49
Which open source engine is used by Oracle Cloud Infrastructure (OCI) to power Oracle Functions?

Knative

Kubeless

Apache OpenWhisk

Fn Project

QUESTION 50
Which concept in OCI Queue is responsible for hiding a message from other consumers for a predefined amount of time after it has been delivered to a consumer?

Maximum retention period

Visibility timeout

Delivery count

Polling timeout

QUESTION 51
Which of the following TWO statements are TRUE about deleting a Kubernetes cluster? (Choose two.)

Upon deleting a cluster, other resources created during the cluster creation process or associated with the cluster (such as VCNS, Internet Gateways, NAT Gateways, Route Tables, Security Lists, B. Load Balancers, and Block Volumes) are deleted automatically.

If you change the auto-generated name of a worker node and then delete the cluster, the renamed worker node is not deleted.

Upon deleting a cluster, no other resources created during the cluster creation process or associated with the cluster (such as VCNS. Internet Gateways, NAT Gateways, Route Tables, Security Lists. Load Balancers, and Block Volumes) are deleted automatically.

Changing the auto-generated name of a worker node does not affect the deletion of the worker node when the cluster in which it is created is deleted.

You cannot change the autogenerated names of the worker nodes in the format oke-c<part-of cluster- CCID>-<part-of-node-pool-OCID>-<part-of-subnet-OCID>-<slot> within a Kubernetes cluster.

QUESTION 52
As a developer, you have been tasked with implementing a microservices-based application. Which THREE technologies are best suited to accomplish the task? (Choose three.)

Terraform

Big Data

Anomaly Detection

Service Mesh

Docker

Kubemetes

QUESTION 53
Assuming that your function does NOT have the –provisioned-concurrency option enabled, which parameter is used to configure the time period during which an idle function will remain in memory before Oracle Functions removes its container image from memory?

timeout

access-timeout

idle-timeout

None, as this time is not configurable.

QUESTION 54
Which option best defines microservices?

A statically typed and compiled language.

An open-source system for automating deployment, scaling, and management of containerized applications.

A finely tuned piece of software that performs a single or small collection of tasks.

An organized collection of structured information or data, typically stored electronically in a computer system.

QUESTION 55
What are the TWO main reasons you would choose to implement a serverless architecture? (Choose two.)

No need for integration testing

Automatic horizontal scaling

Easier to run long-running operations

Reduced operational cost

Improved in-function state management

QUESTION 56
Kubernetes includes various elements such as compute, network, and storage. Compute is essentially CPU (units) and memory (bytes). Within an OKE cluster, what is considered to be the smallest unit of deployment with respect to compute?

Container

Service

Pod

Namespace

Deployment resource

QUESTION 57
You encounter an unexpected error when invoking Oracle Functions from your Cloud Shell session named myfunction in the myapp application. Which option will get you more information on the error?

fn –verbose invoke myapp myfunction

fn –debug invoke myapp myfunction

Contact Oracle support with your error message

DEBUG=1 fn invoke myapp myfunction

QUESTION 58
As a Cloud Native developer, you develop two services in Node.js and deploy them to two different Container Engine for Kubernetes (OKE) clusters that use the same Virtual Cloud Network (VCN). Your security team wants to analyze the network communication between them. How can this requirement be met in the most cost-effective way?

Rewrite the application and send the application logs to an outside log aggregator.

Deploy a third-party logging service and aggregate the network flow logs.

Use the OCI Logging service and enable VCN flow logs.

Deploy Wireshark and intercept the packets.

The best answer is: “Use the OCI Logging service and enable VCN flow logs.” To meet the requirement of analyzing network communication between two services deployed in different Container Engine for Kubernetes (OKE) clusters within the same Virtual Cloud Network (VCN) in a cost-effective way, you can use the OCI Logging service and enable VCN flow logs. The VCN flow logs feature in OCI allows you to capture and log network traffic information for your VCN resources. By enabling VCN flow logs, you can monitor and analyze the network communication between your services without the need for additional third-party logging services or tools. Enabling VCN flow logs provides visibility into the network traffic, including source and destination IP addresses, ports, protocols, and other relevant details. This information can be collected and stored in the OCI Logging service, where you can analyze and gain insights into the network communication patterns between your services. By leveraging the built-in capabilities of the OCI Logging service and enabling VCN flow logs, you can fulfill the security team’s requirement for network communication analysis in a cost-effective manner. This eliminates the need for deploying additional third-party logging services or tools, reducing complexity and potential costs associated with their setup and maintenance. The other options mentioned are not the most cost-effective or suitable solutions for analyzing network communication in this scenario: Deploying a third-party logging service and aggregating the network flow logs would introduce additional costs and complexity, which may not be necessary considering the built-in capabilities provided by OCI. Rewriting the application to send logs to an outside log aggregator would not directly address the requirement of analyzing network communication between the services. It would focus more on application-level logs rather than network-level analysis. Deploying Wireshark and intercepting packets would require additional infrastructure setup and maintenance, which may not be the most cost-effective approach for network analysis in this scenario.

QUESTION 59
As a cloud-native developer, you are designing an application that depends on Oracle Cloud Infrastructure (OCI) Object Storage wherever the application is running. Therefore, provisioning of storage buckets should be part of your Kubernetes deployment process for the application. Which of the following should you leverage to meet this requirement? (Choose the best answer.)

Oracle Functions

OCI Service Broker for Kubernetes

Open Service Broker API

OCI Container Engine for Kubernetes

QUESTION 60
You have created a repository in Oracle Cloud Infrastructure Registry (OCIR) in the us-ashburn-1 (iad) region in your tenancy with the heyoci namespace. Which three are valid tags for an image named myapp? (Choose three.)

iad.ccir.io/heyoci/myapp:latest

iad.ocir.io/heyoci/myapp:0.0.2-beta

iad.ocir.io/heyoci/myproject/myapp:0.0.1

us-ashburn-1.ocir.io/myproject/heyoci/myapp:latest

us-ashburn-1.ocir.io/heyoci/myapp:0.0.2-beta

us-ashburn-1.ocir.io/heyoci/myproject/myapp:0.0.2-beta

QUESTION 61
You have two microservices, A and B running in production. Service A relies on APIs from service B. You want to test changes to service A without deploying all of its dependencies, which includes service B. Which approach should you take to test service A?

Test using a previous test version of service B.

Test using an API mock of service B.

Test using the current production version of service B.

This is not possible because service B is a dependency.

QUESTION 62
Your team has been tasked with debugging a Cloud Native application developed using the following Oracle Cloud Infrastructure (OCI) services: Object Storage, Events, Functions, API Gateway, and Autonomous Database. Which of these is NOT a valid option for troubleshooting issues in OCI? (Choose the best answer.)

View service metric information from the OCI Monitoring service.

Configure the application to send logs to the OCI Logging service.

Use OCI Service Connector Hub to configure a service connector to automatically send logs to the OCI Logging Analytics service.

Trace performance issues In the Application Performance Monitoring service by enabling Function traces.

Leverage OCI Cloud Guard to extract and visualize the debug logs generated by your application.

QUESTION 63
You have a containerized application that requires access to an Autonomous Transaction Processing (ATP) Database. Which option is NOT valid when the container is deployed in an OKE cluster? (Choose the best answer.)

Use Kubernetes secrets to configure environment variables on the container with ATP instance OCID, and OCI API credentials. Then use the CreateConnection API endpoint from the service runtime.

Install the Oracle Cloud Infrastructure Service Broker on the Kubernetes cluster and deploy ServiceInstance and ServiceBinding resources for ATP. Then use the specified binding name as a volume in the application deployment manifest.

Create a Kubernetes secret with contents from the instance Wallet files. Use this secret to create a volume mounted to the appropriate path in the application deployment manifest.

Enable Oracle REST Data Services for the required schemas and connect via HTTPS.

The option that is not valid for connecting to an Autonomous Transaction Processing (ATP) Database from a container in Kubernetes is: Install the Oracle Cloud Infrastructure Service Broker on the Kubernetes cluster and deploy ServiceInstance and ServiceBinding resources for ATP. Then use the specified binding name as a volume in the application deployment manifest. The Oracle Cloud Infrastructure Service Broker is not used for connecting to an ATP Database from a container in Kubernetes. The Service Broker is used for provisioning and managing cloud services directly from Kubernetes. It allows you to create and manage instances of OCI services using Kubernetes resources like ServiceInstance and ServiceBinding. To connect to an ATP Database from a container in Kubernetes, you can use one of the following valid options: Enable Oracle REST Data Services for the required schemas and connect via HTTPS. This involves enabling and configuring Oracle REST Data Services (ORDS) for the schemas in the ATP Database. You can then connect to the ATP Database using RESTful endpoints provided by ORDS. Use Kubernetes secrets to configure environment variables on the container with ATP instance OCID and OCI API credentials. Then use the CreateConnection API endpoint from the service runtime. This approach involves configuring the necessary environment variables on the container to provide the ATP instance OCID and OCI API credentials. The application can then use the OCI SDK or REST API (such as the CreateConnection endpoint) to establish a connection to the ATP Database. Create a Kubernetes secret with contents from the instance Wallet files. Use this secret to create a volume mounted to the appropriate path in the application deployment manifest. This method involves creating a Kubernetes secret that contains the necessary credentials from the ATP Database’s instance wallet files. The secret can then be mounted as a volume in the application deployment, allowing the application to access the required credentials for connecting to the ATP Database. Both options 1 and 3 provide valid approaches for connecting to an ATP Database from a container in Kubernetes, depending on the specific requirements and preferences of the application.

QUESTION 64
You developed a microservices-based application that runs in an Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) cluster. Your security team wants to use SSL termination for this application. What should you do to create a secure SSL termination for this application using the fewest steps possible?

Create a self-signed certificate and its corresponding key. Create a Kubernetes secret using the certificate and the key. Then add these annotations to the Kubernetes service: annotations: service.beta.kubernetes.io/oci-load-balancer-ssl-ports: “443” service.beta.kubernetes.io/oci-load-balancer-tls-secret: ssl certificate-secret

Add these annotations to the kubernetes service: annotations: service.beta.kubernetes.io/oci-load-balancer-ssl-ports: “443” service.beta.kubernetes.io/oci-load-balancer-ssl-secret-key: ssl secret-key

Generate a self-signed certificate using Let’s Encrypt. Use that certificate on OCI Load Balancer. Create the Kubernetes service using this load balancer.

The correct answer is: “Create a self-signed certificate and its corresponding key. Create a Kubernetes secret using the certificate and the key. Then add these annotations to the Kubernetes service: annotations: service.beta.kubernetes.io/oci-load-balancer-ssl-ports: ‘443’ service.beta.kubernetes.io/oci-load-balancer-tls-secret: ssl certificate-secret.” To create a secure SSL termination for your microservices-based application running in an OCI Container Engine for Kubernetes (OKE) cluster, you can follow these steps: Create a self-signed certificate and its corresponding key: Generate a self-signed SSL certificate and its private key using a tool like OpenSSL. Create a Kubernetes secret: Create a Kubernetes secret using the certificate and key obtained in the previous step. This secret will securely store the certificate and key within the Kubernetes cluster. Add annotations to the Kubernetes service: Modify the Kubernetes service that exposes your application and add the following annotations to enable SSL termination: annotations: service.beta.kubernetes.io/oci-load-balancer-ssl-ports: ‘443’ (specify the SSL port as 443) annotations: service.beta.kubernetes.io/oci-load-balancer-tls-secret: ssl certificate-secret (specify the name of the Kubernetes secret containing the certificate and key) By following these steps, you can create a secure SSL termination for your application using a self-signed certificate and Kubernetes secret. The annotations added to the Kubernetes service ensure that the SSL port is configured correctly and the TLS secret is utilized for SSL termination when traffic reaches the load balancer. The other options provided are not the most suitable approaches for achieving secure SSL termination in an OCI Container Engine for Kubernetes (OKE) cluster: Adding annotations related to the OCI load balancer SSL secret key is not the correct approach for SSL termination in this scenario. Using Let’s Encrypt to generate a self-signed certificate and configuring it on the OCI Load Balancer is not necessary when you can create and manage the SSL certificate within the Kubernetes cluster using a Kubernetes secret.

QUESTION 65
Who is responsible for patching, upgrading, and maintaining the worker nodes in Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE)? (Choose the best answer.)

Oracle Support

It is automated

The user

Independent Software Vendors