Oracle 1z0-1084-23 問題集

質問 1：
You are tasked with developing an application that requires the use of Oracle Cloud Infrastructure (OCI) APIs to POST messages to a stream in the OCI Streaming service. Which statement is incorrect? (Choose the best answer.)
A. The Content-Type header must be set to application/json
B. The request does not require an Authorization header.
C. The request must include an authorization signing string including (but not limited to) x-content-sha256, content-type, and content-length headers.
D. An HTTP 401 will be returned if the client's clock is skewed more than 5 minutes from the server's.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Which of the following is defined as a configurable, low-latency infrastructure layer that controls the interaction between a network of microservices? (Choose the best answer.)
A. Service Mesh
B. Containers
C. CI/CD Pipelines
D. DevOps
E. Kubernetes
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 3：
You developed a microservices-based application that runs in an Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) cluster. Your security team wants to use SSL termination for this application. What should you do to create a secure SSL termination for this application using the fewest steps possible?
A. Create a self-signed certificate and its corresponding key. Create a Kubernetes secret using the certificate and the key. Then add these annotations to the Kubernetes service: annotations: service.beta.kubernetes.io/oci-load-balancer-ssl-ports: "443" service.beta.kubernetes.io/oci-load-balancer-tls-secret: ssl certificate-secret
B. Create a self-signed certificate and its corresponding key. Create a Kubernetes secret using the certificate and the key. Then add these annotations to the Kubernetes service: annotations: service.beta.kubernetes.io/oci-load-balancer-ssl-ports: "443" service.beta.kubernetes.io/oci-load-balancer-security-list management-mode: "Frontend"
C. Add these annotations to the kubernetes service: annotations: service.beta.kubernetes.io/oci-load-balancer-ssl-ports: "443" service.beta.kubernetes.io/oci-load-balancer-ssl-secret-key: ssl secret-key
D. Generate a self-signed certificate using Let's Encrypt. Use that certificate on OCI Load Balancer. Create the Kubernetes service using this load balancer.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 4：
You are developing a real-time monitoring application for a fleet of vehicles, which will be deployed on Oracle Cloud Infrastructure (OCI). You need to choose between using OCI Queue or OCI Streaming to handle the real-time data feeds from the vehicles. Based on the scenario described, which is the most appropriate choice for handling real-time data feeds?
A. OCI Queue, because it provides at-least-once message delivery, which is critical for real-time monitoring applications
B. OCI Streaming, because it is designed for high-volume, continuous ingestion and processing of data, making it the best choice for a fleet of vehicles
C. OCI Streaming, because it offers exactly-once message delivery, which is necessary for real-time applications
D. OCI Queue, because it is optimized for low-latency messaging and ideal for real-time applications
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 5：
To enforce mutual TLS (mTLS) authentication for clients of your microservices, your team has chosen to leverage the Oracle Cloud Infrastructure (OCI) API Gateway service to create new API Deployments that will direct requests to your microservices. Which is NOT valid regarding the mTLS options in OCI API Gateway?
A. Adding a custom certificate authority (CA) or custom CA bundle to your gateway's trust store for mTLS is optional unless you need to reject certificates that do not contain particular values (such as a domain name).
B. The mTLS request policy can only be enabled at the API deployment specification level, which then applies globally to ALL routes in that deployment.
C. Once the mTLS request policy is enabled, ALL requests with valid certificates are routed to the backend unless you have defined one or more particular values (such as a domain name).
D. Custom CA or custom CA bundles can be added to your gateway's trust store ONLY if they already exist in the OCI Certificates service.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Which feature is typically NOT associated with Cloud Native?
A. Immutable Infrastructure
B. Service Meshes
C. Containers
D. Application Servers
E. Declarative APIs
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 7：
You deployed a Python application to an Oracle Container Engine for Kubernetes (OKE) cluster. However, while testing you found a bug, which you rectified and then created a new Docker image. You now need to ensure that if this new image does not work once deployed, you should be able to roll back to the previous version. Using kubect1, which strategy should you use?
A. A/B Testing
B. Rolling Update
C. Canary Deployment
D. Blue/Green Deployment
正解：B
解説: (Topexam メンバーにのみ表示されます)